Static task
static1
Behavioral task
behavioral1
Sample
f2cd1c245fbb09f05071a3744abf8cd241e9ffa1b8c80c84aba16dbcb8fc4496.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
f2cd1c245fbb09f05071a3744abf8cd241e9ffa1b8c80c84aba16dbcb8fc4496.exe
Resource
win10v2004-20231020-en
General
-
Target
f2cd1c245fbb09f05071a3744abf8cd241e9ffa1b8c80c84aba16dbcb8fc4496
-
Size
2.8MB
-
MD5
1c831c6cdf72b0384dd6908212928ae7
-
SHA1
fd561802511f83253cb3b6e15d2149e5e60395aa
-
SHA256
f2cd1c245fbb09f05071a3744abf8cd241e9ffa1b8c80c84aba16dbcb8fc4496
-
SHA512
818c5504790bc526d80e7cc263c80430b7be4aac75f3120deb5dc859c7bec402dc96ebc207156b56ccf180effc8d3544bd9c618788dff4864f81150f3492b203
-
SSDEEP
49152:fGf0sSHjd02+2KIsfw12ME3eVNFrDVqAUkPI+Zsz1kFQhZFzeMNn:f1Hjdw20f5ME3E36Z+uOE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2cd1c245fbb09f05071a3744abf8cd241e9ffa1b8c80c84aba16dbcb8fc4496
Files
-
f2cd1c245fbb09f05071a3744abf8cd241e9ffa1b8c80c84aba16dbcb8fc4496.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2.3MB
IMAGE_SCN_MEM_READ
VProtect Size: 548KB - Virtual size: 548KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 20KB - Virtual size: 20KB
IMAGE_SCN_MEM_READ