Static task
static1
Behavioral task
behavioral1
Sample
f80d37bf1a8ecb260715ed430c6789bce110ad4e7b7044a3d9fc1ebf66b1e260.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
f80d37bf1a8ecb260715ed430c6789bce110ad4e7b7044a3d9fc1ebf66b1e260.exe
Resource
win10v2004-20230703-en
General
-
Target
f80d37bf1a8ecb260715ed430c6789bce110ad4e7b7044a3d9fc1ebf66b1e260
-
Size
15.1MB
-
MD5
382928b9f2a7ed3d8aa9d686d7bc66bd
-
SHA1
cb698caa7c451218140cd163c8e623a3fd7f6c55
-
SHA256
f80d37bf1a8ecb260715ed430c6789bce110ad4e7b7044a3d9fc1ebf66b1e260
-
SHA512
e2ff55fd44592a9f1794abe7ca85c7092919dcc44afaca5ba4a42804b009bbdd60852cc4d2639392b7d976c48490f2c85b494be971f6d0fb518f78ca30def686
-
SSDEEP
196608:fqRwpyHUAu9fKHwccV13LVKpdqC7MRPOZOf7MOYTUwqSWEadKYgjAHcw6KWGJZy4:YfHMcbC17Qn57MPMjnqSxYgjk9JZy4J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f80d37bf1a8ecb260715ed430c6789bce110ad4e7b7044a3d9fc1ebf66b1e260
Files
-
f80d37bf1a8ecb260715ed430c6789bce110ad4e7b7044a3d9fc1ebf66b1e260.exe windows x86
6d7144ace70edd9ae3d0198f3d415a30
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
PeekNamedPipe
user32
TranslateMessage
shell32
ShellExecuteW
shlwapi
PathFileExistsA
ws2_32
inet_addr
Sections
.text Size: - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 790KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 3.1MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 9.3MB - Virtual size: 9.3MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 12KB - Virtual size: 10KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 432KB - Virtual size: 428KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE