Static task
static1
Behavioral task
behavioral1
Sample
a041b016d99d8cb0a090dc4c01750f12bbd0d0d7730e484c46f8591adbbed429.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
a041b016d99d8cb0a090dc4c01750f12bbd0d0d7730e484c46f8591adbbed429.exe
Resource
win10v2004-20230703-en
General
-
Target
a041b016d99d8cb0a090dc4c01750f12bbd0d0d7730e484c46f8591adbbed429
-
Size
4.0MB
-
MD5
0a067dad7d414d23b1e80863fd98a6e1
-
SHA1
155f431f2a8bb401cba9c6b4701740fff1811023
-
SHA256
a041b016d99d8cb0a090dc4c01750f12bbd0d0d7730e484c46f8591adbbed429
-
SHA512
7250a5a4a702cb2809b3b08db0b8cb94e19a41fb4993058911ac10713687c3e9a2a5e42b5c10b82a5f33714b9d972469960b008942b5ab6fd41ea45abae6a596
-
SSDEEP
98304:XcsxhYyJdrOt4uVobwcJdQXZtF79x566l2:XuyftuVoMiQXZtXb6w2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a041b016d99d8cb0a090dc4c01750f12bbd0d0d7730e484c46f8591adbbed429
Files
-
a041b016d99d8cb0a090dc4c01750f12bbd0d0d7730e484c46f8591adbbed429.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 4.0MB - Virtual size: 8.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE