Static task
static1
Behavioral task
behavioral1
Sample
bad11cac2d43cb39e096dddc492e15a34600674c2468ce2aef2cf22ef4319003.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
bad11cac2d43cb39e096dddc492e15a34600674c2468ce2aef2cf22ef4319003.exe
Resource
win10v2004-20230915-en
General
-
Target
bad11cac2d43cb39e096dddc492e15a34600674c2468ce2aef2cf22ef4319003
-
Size
2.7MB
-
MD5
de44b77482b54995ab084b6526a77649
-
SHA1
98f1689400970670fefb6fb69258c44affe3f47f
-
SHA256
bad11cac2d43cb39e096dddc492e15a34600674c2468ce2aef2cf22ef4319003
-
SHA512
7304e7e9c30202f033416b821c6fc951c2720702db071a210f3e3b81350a6b5f2aceda52c9d272b0f8b79fa6ddb8575689051df3af7dc6fef211cf647812e685
-
SSDEEP
49152:HiEeHRsKA6XsJu0V9j78gkYa7AkVRcF3dtaSCrL5:xeq6E9WZ+3dYr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bad11cac2d43cb39e096dddc492e15a34600674c2468ce2aef2cf22ef4319003
Files
-
bad11cac2d43cb39e096dddc492e15a34600674c2468ce2aef2cf22ef4319003.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 617KB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.1MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ