Static task
static1
Behavioral task
behavioral1
Sample
ced2a70ab87edadecd19192545adf4a5574c81bc18865274780b65cadb603a0c.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ced2a70ab87edadecd19192545adf4a5574c81bc18865274780b65cadb603a0c.exe
Resource
win10v2004-20230703-en
General
-
Target
ced2a70ab87edadecd19192545adf4a5574c81bc18865274780b65cadb603a0c
-
Size
645KB
-
MD5
438d5fc753422776c655a2d47d38762f
-
SHA1
97e3ad00c064e3e3ea190d92a2f913bfecb11b11
-
SHA256
ced2a70ab87edadecd19192545adf4a5574c81bc18865274780b65cadb603a0c
-
SHA512
538d5f771f0be6ec5932f87d156f968c47b650ac5446ef5e82c144451cc3b70c675893a1ee99dabe06d8ffe5d8c7ba4badd1e845bbc99cd1c7b8d47e273570b1
-
SSDEEP
12288:ukhnWLIVxV0BJIIb3X3u0Blhw0jTC85FQPfWwsXDgOmeDk8:BhnWu+f3X3HBlfjTC8kfWbXDAi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ced2a70ab87edadecd19192545adf4a5574c81bc18865274780b65cadb603a0c
Files
-
ced2a70ab87edadecd19192545adf4a5574c81bc18865274780b65cadb603a0c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 601KB - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE