Static task
static1
Behavioral task
behavioral1
Sample
675c7ab50f7e0e38cc001a96b5029a37f96b1649ede4e7945bccb62c16020928.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
675c7ab50f7e0e38cc001a96b5029a37f96b1649ede4e7945bccb62c16020928.exe
Resource
win10v2004-20230220-en
General
-
Target
675c7ab50f7e0e38cc001a96b5029a37f96b1649ede4e7945bccb62c16020928
-
Size
1.3MB
-
MD5
4e8beada515f62f0a0d2e1aba9d43d76
-
SHA1
4f3564048ba064b48d42728c9238b1e5c6cdf001
-
SHA256
675c7ab50f7e0e38cc001a96b5029a37f96b1649ede4e7945bccb62c16020928
-
SHA512
807b7b169badf77495e1922766e57d1dfba0a43c530adc3ec2a7989536c45ae269dc80b209ad9da4489e36fe489d9acbd83e54bf3b1c3966e7e75060d046184a
-
SSDEEP
24576:kr04W/eeZwuOyniSwQwBuec70xbb/KsK0pqCoPA4VlwHJvd9yY:krXW/eeTOFpbOib1pCotpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 675c7ab50f7e0e38cc001a96b5029a37f96b1649ede4e7945bccb62c16020928
Files
-
675c7ab50f7e0e38cc001a96b5029a37f96b1649ede4e7945bccb62c16020928.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.petite Size: 1.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE