Static task
static1
Behavioral task
behavioral1
Sample
68dedcd30aa0eb15dafbbb09b35e7bbb6a9896d6bbc95ee9edf94bd79dfb34a3.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
68dedcd30aa0eb15dafbbb09b35e7bbb6a9896d6bbc95ee9edf94bd79dfb34a3.exe
Resource
win10v2004-20231020-en
General
-
Target
68dedcd30aa0eb15dafbbb09b35e7bbb6a9896d6bbc95ee9edf94bd79dfb34a3
-
Size
3.2MB
-
MD5
895d56061017cf78c41a297f277a2ecd
-
SHA1
01c1597f1a61c6d12e19a78d170877f53b819105
-
SHA256
68dedcd30aa0eb15dafbbb09b35e7bbb6a9896d6bbc95ee9edf94bd79dfb34a3
-
SHA512
6ad00f573b1d89c9c84e539fd6b6896c7a94263a92bc9ca5deee530e98231fa0048e6c166fd5508d11b6ebc7d64c34d4b5a05af008d1dc96a738a2165866d050
-
SSDEEP
98304:x2kFxeH2geT6YbL6QxExvHl7oimmTakgC:2+T6YPqxPl7rTdg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68dedcd30aa0eb15dafbbb09b35e7bbb6a9896d6bbc95ee9edf94bd79dfb34a3
Files
-
68dedcd30aa0eb15dafbbb09b35e7bbb6a9896d6bbc95ee9edf94bd79dfb34a3.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.1MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.6MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 12KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ