Static task
static1
Behavioral task
behavioral1
Sample
80fc991ade3894f0e84f179ef0ade85f5e9226dccdbdedf439ecd4522e44f228.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
80fc991ade3894f0e84f179ef0ade85f5e9226dccdbdedf439ecd4522e44f228.exe
Resource
win10v2004-20230220-en
General
-
Target
80fc991ade3894f0e84f179ef0ade85f5e9226dccdbdedf439ecd4522e44f228
-
Size
4.3MB
-
MD5
eee1665f7d294584be7da32d6c7c82b5
-
SHA1
76f4495e14a802baedf682612d0db39be6b9993a
-
SHA256
80fc991ade3894f0e84f179ef0ade85f5e9226dccdbdedf439ecd4522e44f228
-
SHA512
4d18dc9432e3d689efe720b66c75d5d383f0fc2582c5cfc64375c905a179e3cd244bb38da64d0a30644071a13d51557dccea34f1fd5a7c907b723518fd22ea9e
-
SSDEEP
98304:dgeFJSsMhUudpr4M6E1pKuG48q00/Ja0uYVjB/t:TFnMKudNt6M98zGjB1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80fc991ade3894f0e84f179ef0ade85f5e9226dccdbdedf439ecd4522e44f228
Files
-
80fc991ade3894f0e84f179ef0ade85f5e9226dccdbdedf439ecd4522e44f228.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
text Size: - Virtual size: 10.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
code Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE