Static task
static1
Behavioral task
behavioral1
Sample
20f75014515d2c3b52cf22a8badfbb738d1e3b1ac197464d00162e25d5b3745e.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
20f75014515d2c3b52cf22a8badfbb738d1e3b1ac197464d00162e25d5b3745e.exe
Resource
win10v2004-20230621-en
General
-
Target
20f75014515d2c3b52cf22a8badfbb738d1e3b1ac197464d00162e25d5b3745e
-
Size
741KB
-
MD5
49c897cc52608a3194ee84d278ee4ba2
-
SHA1
933b68d010757594435b0a5929f7629c744a83e3
-
SHA256
20f75014515d2c3b52cf22a8badfbb738d1e3b1ac197464d00162e25d5b3745e
-
SHA512
24609aa54b08ab5be3ac755a185f2a5a87976652a842619a854817889a01fb87d94788aac804b394eae6db7a7a5418d54660a56f93039667738f247710fc7e74
-
SSDEEP
12288:kYRHNodNppLwXG0SmSef0/g94JR9WThw0jTC85F368CIxFMiSy:FKDw+xG0/g2gfjTC8fnrFJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20f75014515d2c3b52cf22a8badfbb738d1e3b1ac197464d00162e25d5b3745e
Files
-
20f75014515d2c3b52cf22a8badfbb738d1e3b1ac197464d00162e25d5b3745e.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 383KB - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 328KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE