Static task
static1
Behavioral task
behavioral1
Sample
d7f262a51ba3bbfacb2e56b8e3dce9dd57f131d7941fb9f018e54d08940ccec8.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d7f262a51ba3bbfacb2e56b8e3dce9dd57f131d7941fb9f018e54d08940ccec8.exe
Resource
win10v2004-20230915-en
General
-
Target
d7f262a51ba3bbfacb2e56b8e3dce9dd57f131d7941fb9f018e54d08940ccec8
-
Size
12.1MB
-
MD5
a83742168952da3e5c04feaa3404ca75
-
SHA1
e9fbc6617e52cd23bcfa3c3eada089b0a62f3efd
-
SHA256
d7f262a51ba3bbfacb2e56b8e3dce9dd57f131d7941fb9f018e54d08940ccec8
-
SHA512
3909f0b4f72544649939709b4bc6fdf835ebfcdf6fd3541d6be03c6c8326dd084a211cddcfd4c27138e32bd0f94d1bb48aabacfe4edc173a908694de02d8cf26
-
SSDEEP
196608:M7c2C6mk5I6mSzKljXbtI5/h051FEKje4NWn19Cb511Rd0TqzFAYMpWZghO3S7X:M4XkqOKXqx1KKf14r9z/ghd7X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d7f262a51ba3bbfacb2e56b8e3dce9dd57f131d7941fb9f018e54d08940ccec8
Files
-
d7f262a51ba3bbfacb2e56b8e3dce9dd57f131d7941fb9f018e54d08940ccec8.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 376KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 2.2MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 32KB - Virtual size: 334KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.winlice Size: - Virtual size: 16.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 9.5MB - Virtual size: 9.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ