Static task
static1
Behavioral task
behavioral1
Sample
d83b05be505764292d6fb3bca28b0c072d366437e352d342232403e837c8d4fe.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d83b05be505764292d6fb3bca28b0c072d366437e352d342232403e837c8d4fe.exe
Resource
win10v2004-20230915-en
General
-
Target
d83b05be505764292d6fb3bca28b0c072d366437e352d342232403e837c8d4fe
-
Size
4.6MB
-
MD5
d12f36077de4a4b3aa683c53da9b655c
-
SHA1
459b01fc1ded2d9c7dc11d7843048f88056e7e5d
-
SHA256
d83b05be505764292d6fb3bca28b0c072d366437e352d342232403e837c8d4fe
-
SHA512
e7a66b316cdfc0d1952af99e54fd1294030d316a7cc315eb104deb66416c8440aa11b3b31a99908c14925cc4f30366c4590e2e374b025d4bab98998001cc250b
-
SSDEEP
98304:yJng+57POcjDFYpoc2N2njZ0HXW1ps4LbbvJwhtvMPC:Ag+Z20DFYOc2NeYXkpJLiMPC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d83b05be505764292d6fb3bca28b0c072d366437e352d342232403e837c8d4fe
Files
-
d83b05be505764292d6fb3bca28b0c072d366437e352d342232403e837c8d4fe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 4.4MB
IMAGE_SCN_MEM_READ
VProtect Size: 548KB - Virtual size: 548KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 164KB - Virtual size: 164KB
IMAGE_SCN_MEM_READ