Static task
static1
Behavioral task
behavioral1
Sample
347bb830e11b694d09a8eb7390237cf2e86a3d6adfb4543e9086f8df95b19da8.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
347bb830e11b694d09a8eb7390237cf2e86a3d6adfb4543e9086f8df95b19da8.exe
Resource
win10v2004-20231020-en
General
-
Target
347bb830e11b694d09a8eb7390237cf2e86a3d6adfb4543e9086f8df95b19da8
-
Size
5.5MB
-
MD5
bbfd792e46ba7df1a31b2e91bd6c38a1
-
SHA1
8efbcd48e55ea70e8a35abf3380e8d714437549f
-
SHA256
347bb830e11b694d09a8eb7390237cf2e86a3d6adfb4543e9086f8df95b19da8
-
SHA512
5a9dfaa521dc3204d6775286fec1ac69df643c859e07757762a92cc3d6d438e0d827c354b3951ac62ce2e8365737e2b7a8b2bd61c967ec01938ccb9ce79e6273
-
SSDEEP
24576:blhYsTdtmppZWpNc9Y0Q9AWbv74i5fY5pkwVGziLUiTNwD9Qgz:pus19ci5fMpfpNy9Qgz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 347bb830e11b694d09a8eb7390237cf2e86a3d6adfb4543e9086f8df95b19da8
Files
-
347bb830e11b694d09a8eb7390237cf2e86a3d6adfb4543e9086f8df95b19da8.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5.4MB - Virtual size: 26.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE