Static task
static1
Behavioral task
behavioral1
Sample
a174e35246042057fe28d4425913737db8bb0f84899a73d6ea716b831611b483.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
a174e35246042057fe28d4425913737db8bb0f84899a73d6ea716b831611b483.exe
Resource
win10v2004-20230831-en
General
-
Target
a174e35246042057fe28d4425913737db8bb0f84899a73d6ea716b831611b483
-
Size
2.0MB
-
MD5
ffb26f8ff417baa22681d10ca80a2883
-
SHA1
b024a85abb784fa4130c9949047c66993c1598b6
-
SHA256
a174e35246042057fe28d4425913737db8bb0f84899a73d6ea716b831611b483
-
SHA512
58c3ceff0c5f5b02f62b1f2491042d1b8c039868c763c87de7de12172cd3af594ff8e3f2e1a8f68fe6d3f7563952d1375d658a33b157280fec69b28dab916554
-
SSDEEP
49152:kUtWCjbUw/8YfQbk3acKpvimbWZZnUQ88Om1EBxE:LtTjbJ8uZw6AWZZU+OAux
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a174e35246042057fe28d4425913737db8bb0f84899a73d6ea716b831611b483
Files
-
a174e35246042057fe28d4425913737db8bb0f84899a73d6ea716b831611b483.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 428KB - Virtual size: 912KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 100KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 36KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 460KB - Virtual size: 460KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 176KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 860KB - Virtual size: 860KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE