Static task
static1
Behavioral task
behavioral1
Sample
dceb39dd63664cd485b425f45a0e3e8e8f8bfd5c1019a030ff3513e3fadf2634.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
dceb39dd63664cd485b425f45a0e3e8e8f8bfd5c1019a030ff3513e3fadf2634.exe
Resource
win10v2004-20230915-en
General
-
Target
dceb39dd63664cd485b425f45a0e3e8e8f8bfd5c1019a030ff3513e3fadf2634
-
Size
30KB
-
MD5
2bb44a7013a1d01cc97185d33ed2dec6
-
SHA1
2f4b0d863e46b88d33033ec81df0b5f0ef21089c
-
SHA256
dceb39dd63664cd485b425f45a0e3e8e8f8bfd5c1019a030ff3513e3fadf2634
-
SHA512
2b604b9f136684a32b1202ca9f87cc77d8e8038c8aa0f688d6bb936528af9c5ce9bbba96c0a27be68e0a062ee5c3130d9f7dcc66d3088a25f3d2fd9e1336e9bc
-
SSDEEP
768:gk1ODKAaDMG8H92RwZNQSwcfymNBg+g61GoLTn3:gufgLdQAQfcfymNn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dceb39dd63664cd485b425f45a0e3e8e8f8bfd5c1019a030ff3513e3fadf2634
Files
-
dceb39dd63664cd485b425f45a0e3e8e8f8bfd5c1019a030ff3513e3fadf2634.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE