Static task
static1
Behavioral task
behavioral1
Sample
c93248a8d5170b843cedd180afab018c79484aa7133ea87ba4838a22b15c2a64.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c93248a8d5170b843cedd180afab018c79484aa7133ea87ba4838a22b15c2a64.exe
Resource
win10v2004-20230915-en
General
-
Target
c93248a8d5170b843cedd180afab018c79484aa7133ea87ba4838a22b15c2a64
-
Size
1.3MB
-
MD5
fba4e598883870d673ba43bebcd7d518
-
SHA1
7fcf26d4fd6f4e1b6bf79c7491a46510e7565485
-
SHA256
c93248a8d5170b843cedd180afab018c79484aa7133ea87ba4838a22b15c2a64
-
SHA512
46143b2001e42eb884a38a47c532e9665a0eae460c80eb7ae656d98bea7224e132b77ad33ac86ec85d80a628df135e194d2bb316aefa114d91728592743af056
-
SSDEEP
24576:LBaSPhguTUNRE5AOAxjUlJu2tE6jYfZouDeQId3+MdSOd7TBvFuMcGsgb:ddguQbUAOAeK2tE60aIC3zB73uMcG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c93248a8d5170b843cedd180afab018c79484aa7133ea87ba4838a22b15c2a64
Files
-
c93248a8d5170b843cedd180afab018c79484aa7133ea87ba4838a22b15c2a64.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 256KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 176KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 884KB - Virtual size: 884KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE