Static task
static1
Behavioral task
behavioral1
Sample
ed5b62d50fcceabac1e16511a887183d4ce14bdc56d492983be2dd5772a4e204.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ed5b62d50fcceabac1e16511a887183d4ce14bdc56d492983be2dd5772a4e204.exe
Resource
win10v2004-20230915-en
General
-
Target
ed5b62d50fcceabac1e16511a887183d4ce14bdc56d492983be2dd5772a4e204
-
Size
77KB
-
MD5
c233721cc3d635a5d506c610db9bb09f
-
SHA1
68c847e78ad1dee4aa88a71f28ae8fc9ffd95f24
-
SHA256
ed5b62d50fcceabac1e16511a887183d4ce14bdc56d492983be2dd5772a4e204
-
SHA512
aead2b62af9031de97f46a6ef717f97bb1d34c4bbdfbc96a081b69a69e3f0667f9959160bb1255ec73a336a9745dc30d6a7ce7250b78e57dead33ca1c04c94b6
-
SSDEEP
1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOvvil:GhfxHNIreQm+Hiovil
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed5b62d50fcceabac1e16511a887183d4ce14bdc56d492983be2dd5772a4e204
Files
-
ed5b62d50fcceabac1e16511a887183d4ce14bdc56d492983be2dd5772a4e204.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PEC Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE