Static task
static1
Behavioral task
behavioral1
Sample
251efb480110122f38a4267fe9a65812c5702b7afd10b3cc5261cc1239bf011c.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
251efb480110122f38a4267fe9a65812c5702b7afd10b3cc5261cc1239bf011c.exe
Resource
win10v2004-20230621-en
General
-
Target
251efb480110122f38a4267fe9a65812c5702b7afd10b3cc5261cc1239bf011c
-
Size
492KB
-
MD5
df2bf4e474600a35f5591bc400efa8cb
-
SHA1
b5d7ac56e64f6bccfd9d3a62add5b9b6795fa0cc
-
SHA256
251efb480110122f38a4267fe9a65812c5702b7afd10b3cc5261cc1239bf011c
-
SHA512
5f67938cede17cbf4e9a2582481c378cef9bc3d0eac72d4abe430237697831ef148cc17e5faadc33043e277916dd278a3e6a06e45e845fd50ea70ea50a07acf2
-
SSDEEP
12288:X0qoZvGMgeVY7mqFJ3pzQrKOuplZw1b7:X0qytVY33dQrLab
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 251efb480110122f38a4267fe9a65812c5702b7afd10b3cc5261cc1239bf011c
Files
-
251efb480110122f38a4267fe9a65812c5702b7afd10b3cc5261cc1239bf011c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 481KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 456KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ