Static task
static1
Behavioral task
behavioral1
Sample
de31f6f451a368ff8228d9e739c0d432a1041af45eec49e66f4193dba499289c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
de31f6f451a368ff8228d9e739c0d432a1041af45eec49e66f4193dba499289c.exe
Resource
win10v2004-20230915-en
General
-
Target
de31f6f451a368ff8228d9e739c0d432a1041af45eec49e66f4193dba499289c
-
Size
4.2MB
-
MD5
1ac951ba69ffc952c8fe53c7aba34a25
-
SHA1
72a9b5fcb707050ef18c8aac8f1222721227ff2a
-
SHA256
de31f6f451a368ff8228d9e739c0d432a1041af45eec49e66f4193dba499289c
-
SHA512
29590b3f20d63fe139917ee2cc737c899d022051db10e0d90776aca37f85a2caad7791ec5d7d870ce6855fcf610a4a008f0462c51a504c7d3ed2eae02bc6043b
-
SSDEEP
98304:4pbn/+qgGcfCM472Of94T2D4TvvVP1sbwhylpYmkb:W/TgGUCwOf9pDOnXIiFb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de31f6f451a368ff8228d9e739c0d432a1041af45eec49e66f4193dba499289c
Files
-
de31f6f451a368ff8228d9e739c0d432a1041af45eec49e66f4193dba499289c.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.6MB
IMAGE_SCN_MEM_READ
VProtect Size: 548KB - Virtual size: 548KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 3.6MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 48KB - Virtual size: 48KB
IMAGE_SCN_MEM_READ