Static task
static1
Behavioral task
behavioral1
Sample
a80cce296f74a7150ef19f481a497b262ff6657c6ba3d5ae3489c1fc99f46842.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
a80cce296f74a7150ef19f481a497b262ff6657c6ba3d5ae3489c1fc99f46842.exe
Resource
win10v2004-20231020-en
General
-
Target
a80cce296f74a7150ef19f481a497b262ff6657c6ba3d5ae3489c1fc99f46842
-
Size
1.6MB
-
MD5
6de518881f5f9e1135e30be95d07fb68
-
SHA1
47d45ab1b991458eae764c2d65d32c7fa183cd7f
-
SHA256
a80cce296f74a7150ef19f481a497b262ff6657c6ba3d5ae3489c1fc99f46842
-
SHA512
6aceab7ef23be93d246cb2834bef681a1afb58122482687c622c3550be4ec9b63fb171c858f35c2f80f0857d972f6ad427527fcc4e44084b9493eb0787be5d76
-
SSDEEP
24576:ubBVxl8JCDPwpla670Vv07bfV76F3dZDa3Cb2byC39bnakLwyhr:qYuPKImcF3dtaSCrLj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a80cce296f74a7150ef19f481a497b262ff6657c6ba3d5ae3489c1fc99f46842
Files
-
a80cce296f74a7150ef19f481a497b262ff6657c6ba3d5ae3489c1fc99f46842.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 218KB
IMAGE_SCN_MEM_READ
VProtect Size: 615KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 974KB - Virtual size: 1024KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 67KB - Virtual size: 68KB
IMAGE_SCN_MEM_READ