Static task
static1
Behavioral task
behavioral1
Sample
62abdd42e4f3ef8fe97d45ed944bbca3310f802e6b7bac742700e637c27d2434.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
62abdd42e4f3ef8fe97d45ed944bbca3310f802e6b7bac742700e637c27d2434.exe
Resource
win10v2004-20230915-en
General
-
Target
62abdd42e4f3ef8fe97d45ed944bbca3310f802e6b7bac742700e637c27d2434
-
Size
4.6MB
-
MD5
dc344c1dec6db72af03660403393e09d
-
SHA1
fb5ab542137042df5f532cd581790dd4072e4832
-
SHA256
62abdd42e4f3ef8fe97d45ed944bbca3310f802e6b7bac742700e637c27d2434
-
SHA512
b788778b25462b14634080af5a1ccc534a087f932028b83698ef8de741d10d8713b67f8992c05cd291557e8bdc0fd0dae55a3884c9547ddec0b3c0220de24733
-
SSDEEP
98304:N0tCDPa7T7FiTdiSkTjUziWf7AqBGc8rwHL:N0Qaz4BkTjgfkqBGcPHL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62abdd42e4f3ef8fe97d45ed944bbca3310f802e6b7bac742700e637c27d2434
Files
-
62abdd42e4f3ef8fe97d45ed944bbca3310f802e6b7bac742700e637c27d2434.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1.8MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
motgbupa Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iyprplwb Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma1 Size: 340KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE