Static task
static1
Behavioral task
behavioral1
Sample
206f0ffa04deb64936ac98e47fb900e1f6d0c1c57c746c41fed4eed32a4fb289.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
206f0ffa04deb64936ac98e47fb900e1f6d0c1c57c746c41fed4eed32a4fb289.exe
Resource
win10v2004-20230915-en
General
-
Target
206f0ffa04deb64936ac98e47fb900e1f6d0c1c57c746c41fed4eed32a4fb289
-
Size
170KB
-
MD5
48093aefd6691c63d497d5feb84b84d8
-
SHA1
b6f3ed23456666349d53c1f81ee1ddf42c9dc7e0
-
SHA256
206f0ffa04deb64936ac98e47fb900e1f6d0c1c57c746c41fed4eed32a4fb289
-
SHA512
d256cf80bef81b8849f7ad306c6c8ac88bccd3bf7e832f8a6820141f2cda93b5a97088416b88c96ee52789173a70bdcdcba97e275fc17fda67a57cd3cbe04372
-
SSDEEP
3072:oIsPtnAvdm/FVgfZ/9ubIgcGChAE2QCK+HuJzSOAnZ7p76rhWJ0xgXkHngXMRBJo:nsVA4LeQ8+CaE2QCK+HuJzSxZ75/qx76
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 206f0ffa04deb64936ac98e47fb900e1f6d0c1c57c746c41fed4eed32a4fb289
Files
-
206f0ffa04deb64936ac98e47fb900e1f6d0c1c57c746c41fed4eed32a4fb289.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: 104B - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 169KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE