Static task
static1
Behavioral task
behavioral1
Sample
ff0dd595c6618da559755d86983d1e1b81e670a5a4c43ba31d9769110a684e54.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ff0dd595c6618da559755d86983d1e1b81e670a5a4c43ba31d9769110a684e54.exe
Resource
win10v2004-20230915-en
General
-
Target
ff0dd595c6618da559755d86983d1e1b81e670a5a4c43ba31d9769110a684e54
-
Size
15.2MB
-
MD5
e3d19bb4b9fd569e15bd78a2bf358f4c
-
SHA1
c994bb28b5a0577045c483d9efb8a8e13faee871
-
SHA256
ff0dd595c6618da559755d86983d1e1b81e670a5a4c43ba31d9769110a684e54
-
SHA512
bc5ec02e4d7af24e3c70116799cd7b804d943c902981392abe1ea472c349806caa84afb69a5a6fbf6c66a7caae02e551c4dcc5130308e3e870f0e79dcf0a0e3a
-
SSDEEP
393216:uhHkwSM+HzPq4lBLN/ws5VGeBBQrU0veW9nskw2LSoWpRdb:uhHkpMgzC4l7Ys5yfFskFWoWtb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff0dd595c6618da559755d86983d1e1b81e670a5a4c43ba31d9769110a684e54
Files
-
ff0dd595c6618da559755d86983d1e1b81e670a5a4c43ba31d9769110a684e54.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 856KB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 13.0MB - Virtual size: 13.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 88KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 176KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 868KB - Virtual size: 868KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE