Static task
static1
Behavioral task
behavioral1
Sample
f7e11bc479d0d8c82ac3faa15e0860734b9b4e9f6824659d145b8d19d8e27439.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
f7e11bc479d0d8c82ac3faa15e0860734b9b4e9f6824659d145b8d19d8e27439.exe
Resource
win10v2004-20230703-en
General
-
Target
f7e11bc479d0d8c82ac3faa15e0860734b9b4e9f6824659d145b8d19d8e27439
-
Size
660KB
-
MD5
a67e2124a5f8fce7733384867019fd89
-
SHA1
13f3769be657f47fac73534abdc64d2acaa499b0
-
SHA256
f7e11bc479d0d8c82ac3faa15e0860734b9b4e9f6824659d145b8d19d8e27439
-
SHA512
69ee51185976e9e3e7cf940243a92fa9276fada1fa2a014bae78b1ed2c9b677a1c143df19ce1a6346b5b6eeb3680bbb94ad532025d7d480487643e78ba66e802
-
SSDEEP
12288:H+02aszFyIVxV0BJIIb3X3uUB9hw0jTC85FgE8vga1ER/qwU:H+02aszFl+f3X3nB9fjTC81CCR/qwU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7e11bc479d0d8c82ac3faa15e0860734b9b4e9f6824659d145b8d19d8e27439
Files
-
f7e11bc479d0d8c82ac3faa15e0860734b9b4e9f6824659d145b8d19d8e27439.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����� Size: 599KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE