Static task
static1
Behavioral task
behavioral1
Sample
c42b516c9a48ebb6260675cbc2678a8d8fec3978c387e58a84fbf5f54877c622.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c42b516c9a48ebb6260675cbc2678a8d8fec3978c387e58a84fbf5f54877c622.exe
Resource
win10v2004-20230915-en
General
-
Target
c42b516c9a48ebb6260675cbc2678a8d8fec3978c387e58a84fbf5f54877c622
-
Size
3.9MB
-
MD5
da97661f99106a75269ef7cd66fb4360
-
SHA1
18d48ee3e109fe9d897f6c2d37cf7fdfa7b05e0c
-
SHA256
c42b516c9a48ebb6260675cbc2678a8d8fec3978c387e58a84fbf5f54877c622
-
SHA512
0ae2b8b83bffe940e4aa948f37590e78a6159fed72fa30ac6ebda0b6298ca3a7505aaafae1752443a9deb7cfc1b8e1939582b01ae47c4c2f1d299059090fe0ee
-
SSDEEP
98304:heJXLl+yelWiiO+0zNZ0WCLFsjk/TqGDQHrGhAbBB:h47lnec70BZ0r+yTqGpe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c42b516c9a48ebb6260675cbc2678a8d8fec3978c387e58a84fbf5f54877c622
Files
-
c42b516c9a48ebb6260675cbc2678a8d8fec3978c387e58a84fbf5f54877c622.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE