Static task
static1
Behavioral task
behavioral1
Sample
42b6bcfd4da925f270e620fb88a876ca60cdf0807a168b1189b9bb05acb7c78b.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
42b6bcfd4da925f270e620fb88a876ca60cdf0807a168b1189b9bb05acb7c78b.exe
Resource
win10v2004-20230621-en
General
-
Target
42b6bcfd4da925f270e620fb88a876ca60cdf0807a168b1189b9bb05acb7c78b
-
Size
739KB
-
MD5
8ed92ec349591eba0b6d218a8d6d5960
-
SHA1
4b796b105d331130c986e2c1064516b0a2691723
-
SHA256
42b6bcfd4da925f270e620fb88a876ca60cdf0807a168b1189b9bb05acb7c78b
-
SHA512
3cef8ac9e687c60978e05f5f1a7b1a7b8ef3adf2decc984a5f6a94ccce12c6fa22aac28fd7d4f3a6acebaefed1bb2e77c53536f54c53bd413a4695f123cacbd0
-
SSDEEP
12288:QMO+O7FNnkvHHMtI9ghk0j94Jl0cQSmVSObuVMhw0jTC85FiPfWwsXDgOmeDZJ6G:s7FNnAn+Ikkk94Q/SoFwMfjTC8GfWbX5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42b6bcfd4da925f270e620fb88a876ca60cdf0807a168b1189b9bb05acb7c78b
Files
-
42b6bcfd4da925f270e620fb88a876ca60cdf0807a168b1189b9bb05acb7c78b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 10KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 380KB - Virtual size: 556KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 329KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE