Static task
static1
Behavioral task
behavioral1
Sample
896c23bdd4d24fb98c40c3fdca459e020f9a7f75673645dc4360987fa37a6685.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
896c23bdd4d24fb98c40c3fdca459e020f9a7f75673645dc4360987fa37a6685.exe
Resource
win10v2004-20230621-en
General
-
Target
896c23bdd4d24fb98c40c3fdca459e020f9a7f75673645dc4360987fa37a6685
-
Size
402KB
-
MD5
a62f7075189bcedc4f9ffb286ff29eb8
-
SHA1
bb533e6cfb2e80e62c65943ed2e11d2732e87e95
-
SHA256
896c23bdd4d24fb98c40c3fdca459e020f9a7f75673645dc4360987fa37a6685
-
SHA512
a63b88c262fc546a3f2c1338202883a15a4e5fec194aa9b4ae79114bc597e07b94285ee6c2b82f8c434845802e516efa47d7c5b31211f89bca1f5c65f36289d4
-
SSDEEP
6144:TAUxSm/Ey5Ogd3NagggIKwLkGDTlzgaq/C6a5dWekBgps+yNYcE3JQFzKP:3Sm/Ey51d3NDDczgah6IdzkGp/NcE3n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 896c23bdd4d24fb98c40c3fdca459e020f9a7f75673645dc4360987fa37a6685
Files
-
896c23bdd4d24fb98c40c3fdca459e020f9a7f75673645dc4360987fa37a6685.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 347KB - Virtual size: 347KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 52B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ