Static task
static1
Behavioral task
behavioral1
Sample
0840acf91b1e393b517e4d8f96e71d6a11e5aa4d794e270c90b314ed4aedcc07.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0840acf91b1e393b517e4d8f96e71d6a11e5aa4d794e270c90b314ed4aedcc07.exe
Resource
win10v2004-20230915-en
General
-
Target
0840acf91b1e393b517e4d8f96e71d6a11e5aa4d794e270c90b314ed4aedcc07
-
Size
786KB
-
MD5
b92d5039870f46fbbedeaa839ef15af3
-
SHA1
f1ac15f7eac11a9da8c71843292a458c7a0ad2a2
-
SHA256
0840acf91b1e393b517e4d8f96e71d6a11e5aa4d794e270c90b314ed4aedcc07
-
SHA512
92068da440e2bb768410db5025b2958e53c9a4fef13e2a9195afad579d843af874e2242396e50c96bc45ee1a485760960ed5c6c54c80de2ba60183f8d8493994
-
SSDEEP
6144:3PL77OfVk07TkAqCSmwS0uo9uqmO5MpOnnhhaMN3UXA/Ta:3v72Vk00AOzuqmO5MpOnhhfN3UQ/T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0840acf91b1e393b517e4d8f96e71d6a11e5aa4d794e270c90b314ed4aedcc07
Files
-
0840acf91b1e393b517e4d8f96e71d6a11e5aa4d794e270c90b314ed4aedcc07.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 450KB - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.!rc! Size: - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 528B - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.mackt Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 325KB - Virtual size: 325KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE