Static task
static1
Behavioral task
behavioral1
Sample
230fa0cbbc36b7821d69a43bc68b59ac0ea470110b8dd01e76779f83a7536b86.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
230fa0cbbc36b7821d69a43bc68b59ac0ea470110b8dd01e76779f83a7536b86.exe
Resource
win10v2004-20230915-en
General
-
Target
230fa0cbbc36b7821d69a43bc68b59ac0ea470110b8dd01e76779f83a7536b86
-
Size
1.6MB
-
MD5
61adeff975065dc6d1d73f7001dc39a1
-
SHA1
1d56441eb265f69757d12957fb2f5d9c5b5b3138
-
SHA256
230fa0cbbc36b7821d69a43bc68b59ac0ea470110b8dd01e76779f83a7536b86
-
SHA512
8b61a08b512dd1d7d7c75db5a1f16b2a2c96827743454438d2b9acac558a49c460795c2edea5c98b4d4ff92330238b23361be732f6a61bfb7058bf1ae4c2ea54
-
SSDEEP
49152:/3TFSMldHj0kMpBAgUy7lxJzdw/WrAbk9i:RLj4kMn5xJzHAbko
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 230fa0cbbc36b7821d69a43bc68b59ac0ea470110b8dd01e76779f83a7536b86
Files
-
230fa0cbbc36b7821d69a43bc68b59ac0ea470110b8dd01e76779f83a7536b86.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.58720 Size: - Virtual size: 568KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.58721 Size: - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 571KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
89vgs Size: 383KB - Virtual size: 384KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
89vgs Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
89vgs Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ