Static task
static1
Behavioral task
behavioral1
Sample
093881af05c01be12240d78a5454a41a102577021593c152111cabb2ec0bc760.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
093881af05c01be12240d78a5454a41a102577021593c152111cabb2ec0bc760.exe
Resource
win10v2004-20230915-en
General
-
Target
093881af05c01be12240d78a5454a41a102577021593c152111cabb2ec0bc760
-
Size
3.5MB
-
MD5
ff501bd402a0743fd752eb38a2e651e4
-
SHA1
1d81db90b9d202cc97aa0ba04b5062d681725c03
-
SHA256
093881af05c01be12240d78a5454a41a102577021593c152111cabb2ec0bc760
-
SHA512
19a1699f4647cff3c86248c9f6e1e32dfd5bda4dddd7a17d7d558b682b35dc9d1f5cdd88c23f7977d037f5068d223cc8473b490e175391bf5f4d4983a2bd6dad
-
SSDEEP
49152:Dd3CuXbNXRAGEDA/SY1EBnu4HekFe6of/6T6+67Pg/tbU8l0scF3dtaSCrL:9CurN6hDA/Sr7ekfE/6m+6E/tbY3dYr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 093881af05c01be12240d78a5454a41a102577021593c152111cabb2ec0bc760
Files
-
093881af05c01be12240d78a5454a41a102577021593c152111cabb2ec0bc760.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.9MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ