Static task
static1
Behavioral task
behavioral1
Sample
010721f60e856cdad5a4c1cea31ae4d109dedba32ee3c34666cd25a14ab101de.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
010721f60e856cdad5a4c1cea31ae4d109dedba32ee3c34666cd25a14ab101de.exe
Resource
win10v2004-20230915-en
General
-
Target
010721f60e856cdad5a4c1cea31ae4d109dedba32ee3c34666cd25a14ab101de
-
Size
2.2MB
-
MD5
7a2785ed10f1e6f820154cf3521af482
-
SHA1
31a7a5fdde45ef2480c6cb65a17219b0071f57ea
-
SHA256
010721f60e856cdad5a4c1cea31ae4d109dedba32ee3c34666cd25a14ab101de
-
SHA512
ca8031c692e702479bc78d69766741ec19b00c914793682b22d0af0a4c0d72fe39b6db0ad8e5f713bace149b0f6843800eccb8c43ed3e41fb30096d0add9d441
-
SSDEEP
49152:doef58uCAR55UF+3Z1B4OCiDqkdm88N0eo:ff58uV5UF+3l4NiC6e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 010721f60e856cdad5a4c1cea31ae4d109dedba32ee3c34666cd25a14ab101de
Files
-
010721f60e856cdad5a4c1cea31ae4d109dedba32ee3c34666cd25a14ab101de.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.2MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 1.6MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 20KB - Virtual size: 20KB
IMAGE_SCN_MEM_READ