Static task
static1
Behavioral task
behavioral1
Sample
30465d6c599f163ec692cd1cffb1c9d24ff0237a58505f82e2404b47d906065c.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
30465d6c599f163ec692cd1cffb1c9d24ff0237a58505f82e2404b47d906065c.exe
Resource
win10v2004-20231020-en
General
-
Target
30465d6c599f163ec692cd1cffb1c9d24ff0237a58505f82e2404b47d906065c
-
Size
3.9MB
-
MD5
e279c25f02cf66ff3071231ffb6022be
-
SHA1
3c19b4069ca3b9a968e5f9a92405c87a792992de
-
SHA256
30465d6c599f163ec692cd1cffb1c9d24ff0237a58505f82e2404b47d906065c
-
SHA512
5b93e0ba4d11745de5387f851b13b80392bd9365d4182fed83f4f9e33859cc3daa0e0a04fbe974671ec27dd7baa58e4ddd05a8eb9fef45c6e70ce2470fe4fb70
-
SSDEEP
98304:vc4MYfv8YNk/DtLQs0lIk40y2aHMnzf2uw9kUEYt:0c8AkLtLQvl20yhHwzfpxXY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30465d6c599f163ec692cd1cffb1c9d24ff0237a58505f82e2404b47d906065c
Files
-
30465d6c599f163ec692cd1cffb1c9d24ff0237a58505f82e2404b47d906065c.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 5.7MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ