Static task
static1
Behavioral task
behavioral1
Sample
ff1d39f28c524c2437a8be8c6f14cca80561a915efc5d78cc6dd5589354a4f09.exe
Resource
win7-20230712-en
General
-
Target
ff1d39f28c524c2437a8be8c6f14cca80561a915efc5d78cc6dd5589354a4f09
-
Size
146KB
-
MD5
49d96f2fc178093e0780b4eb287f9ec1
-
SHA1
bb1c22d9766d729e9cd73ef1659ce9bf9ec793cf
-
SHA256
ff1d39f28c524c2437a8be8c6f14cca80561a915efc5d78cc6dd5589354a4f09
-
SHA512
6f9f8fea618e267896fed755a2d69af6b042acaf77d0cb1b2de3673da1e631b9bb4900224b5f0a826915d9b2b8c3be667e10954af9d2e01af644e6b0c530b8e1
-
SSDEEP
3072:A38oBN9auOmZWXyaiedMbrN6pnoXPBsr5ZrR:doDHOSNaPM4loo5Zd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff1d39f28c524c2437a8be8c6f14cca80561a915efc5d78cc6dd5589354a4f09
Files
-
ff1d39f28c524c2437a8be8c6f14cca80561a915efc5d78cc6dd5589354a4f09.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE