Static task
static1
Behavioral task
behavioral1
Sample
42739463d1a0c9688967bac223dc66f8a09cbe6faaa07bf0f9a1417d973b829f.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
42739463d1a0c9688967bac223dc66f8a09cbe6faaa07bf0f9a1417d973b829f.exe
Resource
win10v2004-20230915-en
General
-
Target
42739463d1a0c9688967bac223dc66f8a09cbe6faaa07bf0f9a1417d973b829f
-
Size
249KB
-
MD5
bb6c8c7b85b8a4610ab8f98204b82b74
-
SHA1
7174d1451f84caf22f015d2dad75737d5947f61d
-
SHA256
42739463d1a0c9688967bac223dc66f8a09cbe6faaa07bf0f9a1417d973b829f
-
SHA512
fab1cf8339cea9538bd92a0a8c2bfa3ad1447c843f3e635435acece1c571c843900303918c5ebfd473602ffeb5de0ad8182f6e0daa1f41e4f5c8edd5ec99d2aa
-
SSDEEP
3072:05LSZQ919r84zyGOxNWz97LyIouW6/6PrE4mzfOv9lH5ANHW0E2t:05ikr84WGOSx65T6/crCDOzHj2t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42739463d1a0c9688967bac223dc66f8a09cbe6faaa07bf0f9a1417d973b829f
Files
-
42739463d1a0c9688967bac223dc66f8a09cbe6faaa07bf0f9a1417d973b829f.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 55KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE