Static task
static1
Behavioral task
behavioral1
Sample
302a6fd5fec8886134af12ec9c7c6259fb07c98c5f10b85235dffea5a7f9dcce.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
302a6fd5fec8886134af12ec9c7c6259fb07c98c5f10b85235dffea5a7f9dcce.exe
Resource
win10v2004-20230915-en
General
-
Target
302a6fd5fec8886134af12ec9c7c6259fb07c98c5f10b85235dffea5a7f9dcce
-
Size
362KB
-
MD5
dd3f8da5a055552df03478de8b22c91a
-
SHA1
61cbc6a27a2ac89f3e90ef4295a15dcc26899191
-
SHA256
302a6fd5fec8886134af12ec9c7c6259fb07c98c5f10b85235dffea5a7f9dcce
-
SHA512
774d3c0069b53be55568196490f456fd96a563ceb019f67e0300fc8af44192739e52d3033ae2036eae9d054d1ce2fecf087a6aa686f8461f2c06be99a7d0c221
-
SSDEEP
6144:3GX1GGGGhGGGG62gcDZHuVLyQXbti9O0g56M6kv9sdfRbhdzf0IT8ziw:hykT56M6k1yfRbhdl4z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 302a6fd5fec8886134af12ec9c7c6259fb07c98c5f10b85235dffea5a7f9dcce
Files
-
302a6fd5fec8886134af12ec9c7c6259fb07c98c5f10b85235dffea5a7f9dcce.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 362KB - Virtual size: 370KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE