Static task
static1
Behavioral task
behavioral1
Sample
514ffbc6843ba4fb36833260fef75ae90af210c3d3d5a7d44027035e20f5ffde.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
514ffbc6843ba4fb36833260fef75ae90af210c3d3d5a7d44027035e20f5ffde.exe
Resource
win10v2004-20230915-en
General
-
Target
514ffbc6843ba4fb36833260fef75ae90af210c3d3d5a7d44027035e20f5ffde
-
Size
1.1MB
-
MD5
fb39f3ba3c428a6b6372f6ac7f914f66
-
SHA1
4bc1578a88e33d21bad84fb8d4ffa78ebfc10d18
-
SHA256
514ffbc6843ba4fb36833260fef75ae90af210c3d3d5a7d44027035e20f5ffde
-
SHA512
fd9a1fac2eb0ce0531659546843e0f250bbdd64fa7b5d929842c601043fabc506d64baab1be8cbf22f057641a4e8ffd20258e4948396100db85eb47ccc0a66de
-
SSDEEP
24576:rWZPGXhSVqxdxws1Ubj/pEv+KI3r3MaV9:p1Ubjx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 514ffbc6843ba4fb36833260fef75ae90af210c3d3d5a7d44027035e20f5ffde
Files
-
514ffbc6843ba4fb36833260fef75ae90af210c3d3d5a7d44027035e20f5ffde.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 252KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 150KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 644KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pseudo Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rol Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE