Static task
static1
Behavioral task
behavioral1
Sample
Malicious_f4fa6e48f4a0d0289e8a870f42cd80f07aca2a65dcbcadb5e3809136e469ed8c.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
Malicious_f4fa6e48f4a0d0289e8a870f42cd80f07aca2a65dcbcadb5e3809136e469ed8c.exe
Resource
win10v2004-20230621-en
General
-
Target
Malicious_f4fa6e48f4a0d0289e8a870f42cd80f07aca2a65dcbcadb5e3809136e469ed8c.exe
-
Size
55KB
-
MD5
2d6286bcb1a2d3f1d07fc80eded2ddd7
-
SHA1
77f752635bf3bbbe7b723643826a9f33fa120d58
-
SHA256
f4fa6e48f4a0d0289e8a870f42cd80f07aca2a65dcbcadb5e3809136e469ed8c
-
SHA512
833e03f6a7480249ef4c41c7bee1af715f7d1129740c1faa33a619b0211bf5b9d93665085e7213088d55f81341b4477afb5de860e43355958097cd2e57ca4c2a
-
SSDEEP
1536:KmrIQoIhay2qP5Okp82q+4V4thSY1/JzTN:Kmr4yhBOky214mthJ1JTN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Malicious_f4fa6e48f4a0d0289e8a870f42cd80f07aca2a65dcbcadb5e3809136e469ed8c.exe
Files
-
Malicious_f4fa6e48f4a0d0289e8a870f42cd80f07aca2a65dcbcadb5e3809136e469ed8c.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 167KB - Virtual size: 31.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 193B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ