Static task
static1
Behavioral task
behavioral1
Sample
616e081570e84609571d7eda851acb127999dd5ceb65506b675f5e04ea3d4425.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
616e081570e84609571d7eda851acb127999dd5ceb65506b675f5e04ea3d4425.exe
Resource
win10v2004-20230915-en
General
-
Target
616e081570e84609571d7eda851acb127999dd5ceb65506b675f5e04ea3d4425
-
Size
99KB
-
MD5
d92ca1908cba67863f0e7b649a8fa0e7
-
SHA1
d607f2bf723f74a11d98225f19ab497433b54085
-
SHA256
616e081570e84609571d7eda851acb127999dd5ceb65506b675f5e04ea3d4425
-
SHA512
c9bd944dad066dbd09a21bd84d9121014c699dd852a39a13831dc223b98188460b67c7a8db890513be392f9413287ee2e111c15c17ff8da1ebf9d51956bb6987
-
SSDEEP
1536:skfgLdQAQfcfymNhMf8NfPi0psqKooHZyB8ZIJ4mG:TftffjmNCUfdoHZyB8ZmVG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 616e081570e84609571d7eda851acb127999dd5ceb65506b675f5e04ea3d4425
Files
-
616e081570e84609571d7eda851acb127999dd5ceb65506b675f5e04ea3d4425.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE