Static task
static1
Behavioral task
behavioral1
Sample
d86f8bd15f55ef73d659fa09153248d3dac1ae0d4671ef04ab1895e6476ecfb6.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
d86f8bd15f55ef73d659fa09153248d3dac1ae0d4671ef04ab1895e6476ecfb6.exe
Resource
win10v2004-20230703-en
General
-
Target
d86f8bd15f55ef73d659fa09153248d3dac1ae0d4671ef04ab1895e6476ecfb6
-
Size
13.4MB
-
MD5
6811f6d177758ea72bf3c254a0051bb2
-
SHA1
a55ac44255d5194819e58093a8d0f7bb21ce6d57
-
SHA256
d86f8bd15f55ef73d659fa09153248d3dac1ae0d4671ef04ab1895e6476ecfb6
-
SHA512
600af3c29e82c1bec0dbd27eaa08740f0ecd67643e079b48e7b0efb47a62cd6f8db7641ddb9ee11c0493c230032140684a716ee81d9f11d5e3f1b45e48b272af
-
SSDEEP
393216:rCkoRuhN7ik3xqACBJ99Rf+xMw93HDSGr2:WfAhNlqAAb9Rf+xMCXDD2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d86f8bd15f55ef73d659fa09153248d3dac1ae0d4671ef04ab1895e6476ecfb6
Files
-
d86f8bd15f55ef73d659fa09153248d3dac1ae0d4671ef04ab1895e6476ecfb6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 592KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 8.5MB - Virtual size: 12.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 40KB - Virtual size: 599KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.winlice Size: - Virtual size: 6.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ