Static task
static1
Behavioral task
behavioral1
Sample
640ce43d9ae8144ef168458c1643ccbf9c170fad535ea85114737a8d2c1af71f.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
640ce43d9ae8144ef168458c1643ccbf9c170fad535ea85114737a8d2c1af71f.exe
Resource
win10v2004-20230915-en
General
-
Target
640ce43d9ae8144ef168458c1643ccbf9c170fad535ea85114737a8d2c1af71f
-
Size
178KB
-
MD5
bfb8c43b212467cbca6ea0fc1055dd89
-
SHA1
06f9f70fa94edc7359a8691016b8463d473dd1f6
-
SHA256
640ce43d9ae8144ef168458c1643ccbf9c170fad535ea85114737a8d2c1af71f
-
SHA512
f036ee4bff90374038b79dfa630bfd2ed5ae0bf072a675bef93aaa5ddbd3157fe90f97e0462b7f6a02e1e17d823113ba403e2fa826bb49b6d453643d6b674171
-
SSDEEP
3072:p70ddhcEsH288mhQZ2IZUGqOYiy2vj+jItJS8/Xh0kswJs9lvtX8ALi8aHGB3vZZ:p4dIEwf8mhGqOYiy2r+jCh0k/UQ8aHqZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 640ce43d9ae8144ef168458c1643ccbf9c170fad535ea85114737a8d2c1af71f
Files
-
640ce43d9ae8144ef168458c1643ccbf9c170fad535ea85114737a8d2c1af71f.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
WPX0 Size: - Virtual size: 780KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WPX1 Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE