Static task
static1
Behavioral task
behavioral1
Sample
642318f12556f1c00033327e7b1bce7798ec9d38bc3d2b78e6d90c73e7d50090.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
642318f12556f1c00033327e7b1bce7798ec9d38bc3d2b78e6d90c73e7d50090.exe
Resource
win10v2004-20230703-en
General
-
Target
642318f12556f1c00033327e7b1bce7798ec9d38bc3d2b78e6d90c73e7d50090
-
Size
1.8MB
-
MD5
e1092558b3b7b43f2aaf4285ba1abd21
-
SHA1
6826f49cfe154681b776ecfa79e2dbab14825575
-
SHA256
642318f12556f1c00033327e7b1bce7798ec9d38bc3d2b78e6d90c73e7d50090
-
SHA512
7aecf294709c41d1dfc3ce99765427099d99499a43593ab2645d9b1207ec9dba27e875e7d46fc954f26848643da59c40473ca73de01f74b2d693cb8951091250
-
SSDEEP
49152:v7ZAW5d56fWZjskAccdukm23hgPJeyhHsHDxsf:pvQosVnhgPJeyhMjGf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 642318f12556f1c00033327e7b1bce7798ec9d38bc3d2b78e6d90c73e7d50090
Files
-
642318f12556f1c00033327e7b1bce7798ec9d38bc3d2b78e6d90c73e7d50090.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE