Static task
static1
Behavioral task
behavioral1
Sample
ed002728cd4598b0cfa10272b920f81b767af77b06b19d4f5d91b118f47c232c.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ed002728cd4598b0cfa10272b920f81b767af77b06b19d4f5d91b118f47c232c.exe
Resource
win10v2004-20230703-en
General
-
Target
ed002728cd4598b0cfa10272b920f81b767af77b06b19d4f5d91b118f47c232c
-
Size
660KB
-
MD5
7ef423ac7b56f12b0f98292720720e00
-
SHA1
30060fd5f683442af176622b5aa079ffa9ce72d2
-
SHA256
ed002728cd4598b0cfa10272b920f81b767af77b06b19d4f5d91b118f47c232c
-
SHA512
7448a3942027815ceaad8240f21d501e1df54180d8bdce0475c327726fe7fbf650348036f62687857314e8df3cc55fb4b843e3e43adf8fbfa750008ce1c41557
-
SSDEEP
12288:XtbJIVxV0BJIIb3X3uoB9hw0jTC85F0cK1vsc:XtbI+f3X3TB9fjTC8Mcevsc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed002728cd4598b0cfa10272b920f81b767af77b06b19d4f5d91b118f47c232c
Files
-
ed002728cd4598b0cfa10272b920f81b767af77b06b19d4f5d91b118f47c232c.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 599KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE