Static task
static1
Behavioral task
behavioral1
Sample
92908b03b005ab1bbd7ed89fd7432426d6671bf08b1c32400408a772ba359760.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
92908b03b005ab1bbd7ed89fd7432426d6671bf08b1c32400408a772ba359760.exe
Resource
win10v2004-20230220-en
General
-
Target
92908b03b005ab1bbd7ed89fd7432426d6671bf08b1c32400408a772ba359760
-
Size
223KB
-
MD5
4e4a2d7ae19bfab300140b2cc6db9fd4
-
SHA1
f8e3472495a16de274ce6dfebe6ecc605e3d6588
-
SHA256
92908b03b005ab1bbd7ed89fd7432426d6671bf08b1c32400408a772ba359760
-
SHA512
d1cc66a8e06a1bc89beb3385be0ee55ea1ecb53c6de684e5251fe4a5780b639d740532ab75e4ddc10e4a008730e11ba8374574126516c0be501c2bda4ad38390
-
SSDEEP
6144:kBJj2RtBvGDxzf3gEl+iFRUCvLHHD9bQgqK41NIhuotlH:kB9mt+xzf39l+CRHdQZF38uuH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 92908b03b005ab1bbd7ed89fd7432426d6671bf08b1c32400408a772ba359760
Files
-
92908b03b005ab1bbd7ed89fd7432426d6671bf08b1c32400408a772ba359760.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 189KB - Virtual size: 672KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 148KB - Virtual size: 800KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE