Static task
static1
Behavioral task
behavioral1
Sample
f1542144ffc0e1830113be8bd1cfb25baca167a1362bb075727debe322d107fb.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
f1542144ffc0e1830113be8bd1cfb25baca167a1362bb075727debe322d107fb.exe
Resource
win10v2004-20230703-en
General
-
Target
f1542144ffc0e1830113be8bd1cfb25baca167a1362bb075727debe322d107fb
-
Size
2.3MB
-
MD5
da12f115c3dbeba716cb49659ce8c67a
-
SHA1
209532a7a0dd9eee390e105b700d4ea1720187ba
-
SHA256
f1542144ffc0e1830113be8bd1cfb25baca167a1362bb075727debe322d107fb
-
SHA512
ef802c1eb936fda888259f6ae6f211c5e67f012ce2699b48fbb86f419c6c86e781707da492ac2ee437b46433bddc66a6ffd879b4e1c8a933491b1cfd6a0b5200
-
SSDEEP
49152:czpONlhE8yYkn8YGqmhTlqOBh3ZJ2UcRYM8dxdtIxF:czY48yYkndCbvpJNcmdxsxF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1542144ffc0e1830113be8bd1cfb25baca167a1362bb075727debe322d107fb
Files
-
f1542144ffc0e1830113be8bd1cfb25baca167a1362bb075727debe322d107fb.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
VKu1pz85 Size: - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4QT0xhDx Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
FpVdANrI Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gnaRCPZi Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7buM7Pfd Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ