Static task
static1
Behavioral task
behavioral1
Sample
81061df8303de1992539f063b0972a063dfdf113a00f4f6abc2c0abc805fee8f.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
81061df8303de1992539f063b0972a063dfdf113a00f4f6abc2c0abc805fee8f.exe
Resource
win10v2004-20230915-en
General
-
Target
81061df8303de1992539f063b0972a063dfdf113a00f4f6abc2c0abc805fee8f
-
Size
199KB
-
MD5
3f39e8be6079579d1d8e67a7da74505f
-
SHA1
9b6b17356173d5b13e5e18884667f08d703098da
-
SHA256
81061df8303de1992539f063b0972a063dfdf113a00f4f6abc2c0abc805fee8f
-
SHA512
e7befa08deba2920a4973e80ee6ac4f9f35ecd01c2258e2ab2b8e8ceda5457d161e4e89e4510e7639855f80f17776b6e314cf1dfb86374b5de1e52b6a878bed1
-
SSDEEP
6144:rBs27MMLyX5HXXXDTXXXOGqIII+pXXX5AYjKXXXDoXXXG6XXXxXXXLIIIEAkOCOB:rK20HXXX/XXXFqIIIcXXX5j2XXXcXXXo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81061df8303de1992539f063b0972a063dfdf113a00f4f6abc2c0abc805fee8f
Files
-
81061df8303de1992539f063b0972a063dfdf113a00f4f6abc2c0abc805fee8f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE