Static task
static1
Behavioral task
behavioral1
Sample
f248ea91eca0082fabb46fdf8afb6da2b96f52f0d644ecab1db085e722e6b420.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
f248ea91eca0082fabb46fdf8afb6da2b96f52f0d644ecab1db085e722e6b420.exe
Resource
win10v2004-20230703-en
General
-
Target
f248ea91eca0082fabb46fdf8afb6da2b96f52f0d644ecab1db085e722e6b420
-
Size
2.7MB
-
MD5
d59409a4ef2bf7f3c71738d99741198a
-
SHA1
923e768144eb7ec3cf6306841786ea55a5eb0e08
-
SHA256
f248ea91eca0082fabb46fdf8afb6da2b96f52f0d644ecab1db085e722e6b420
-
SHA512
d5e72149fe94da5c21a357dd2a3de54afc60ecb55c42270c76f1aef3f2160feb462c2492b8f0cc1e8a36b67c7730ada413fbc425c7375e6a92af114e74f9f5cb
-
SSDEEP
49152:WHSoLnzyQrrOlG4QV+1uF8D09dSd+3nQ1j7CZgNe48WT/u3zn:ZoFrrOlG4QV+1uFFbh3nQ5eZgH7uL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f248ea91eca0082fabb46fdf8afb6da2b96f52f0d644ecab1db085e722e6b420
Files
-
f248ea91eca0082fabb46fdf8afb6da2b96f52f0d644ecab1db085e722e6b420.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.5MB - Virtual size: 8.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 207KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE