Static task
static1
Behavioral task
behavioral1
Sample
607539b00cf1256e2458a6282d8b6519dd91cd7baba1b83f4096c12b8c253cea.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
607539b00cf1256e2458a6282d8b6519dd91cd7baba1b83f4096c12b8c253cea.exe
Resource
win10v2004-20230915-en
General
-
Target
607539b00cf1256e2458a6282d8b6519dd91cd7baba1b83f4096c12b8c253cea
-
Size
3.5MB
-
MD5
9f91fb6d7a4dfe4fe83fdccc05fbfdb2
-
SHA1
de5e4b5ccd3081dac824abab1f312fc4f9b665a9
-
SHA256
607539b00cf1256e2458a6282d8b6519dd91cd7baba1b83f4096c12b8c253cea
-
SHA512
ac7a0ef3e10868a409bc61b75afdc25d6bc10c760dddc96fd8372ed9abb9b1459ce21c7772d790c65f5d219fe9c867a961140b5d65344f0d751bd023f1e1b901
-
SSDEEP
49152:cRDLuIykTmfOFqtgueIVqBHiTIahCwhDZQYQImgFz3dJaB+QjcF3dtaSCrL:uLXhjwguebgAw1ZwgFztJU+x3dYr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 607539b00cf1256e2458a6282d8b6519dd91cd7baba1b83f4096c12b8c253cea
Files
-
607539b00cf1256e2458a6282d8b6519dd91cd7baba1b83f4096c12b8c253cea.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.7MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ