Static task
static1
Behavioral task
behavioral1
Sample
c399ac8d44024dd20d910b5482ebf8f9adca773d2a5de3727d02ddc1e863ac3f.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
c399ac8d44024dd20d910b5482ebf8f9adca773d2a5de3727d02ddc1e863ac3f.exe
Resource
win10v2004-20231020-en
General
-
Target
c399ac8d44024dd20d910b5482ebf8f9adca773d2a5de3727d02ddc1e863ac3f
-
Size
3.0MB
-
MD5
9a6e9fbf3debce789c6ae3824a1c938b
-
SHA1
fc3d3c332c74d2d52d83d10feb9db1eaf1f3bf4b
-
SHA256
c399ac8d44024dd20d910b5482ebf8f9adca773d2a5de3727d02ddc1e863ac3f
-
SHA512
484e791dabc67dcc7b2df000da2241754907f1571cfdadf1b27ff6d25b7bbe1f22dc71535abbe6b8c7e677af8cbfe9b5f5779eaff65967933eefd1d7190a0648
-
SSDEEP
49152:3qs9KEdskcznxf1YoIEX8cXwFXbP6+OTh9MREsZvKcF3dtaSCrL:59ldsX8oIXcSX++OTnk7ZL3dYr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c399ac8d44024dd20d910b5482ebf8f9adca773d2a5de3727d02ddc1e863ac3f
Files
-
c399ac8d44024dd20d910b5482ebf8f9adca773d2a5de3727d02ddc1e863ac3f.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.1MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.3MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 96KB - Virtual size: 96KB
IMAGE_SCN_MEM_READ