Static task
static1
Behavioral task
behavioral1
Sample
71c7765b389afcf2e1a82fc7474805ba2bb12705e7f41a5d63d5afab9b942601.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
71c7765b389afcf2e1a82fc7474805ba2bb12705e7f41a5d63d5afab9b942601.exe
Resource
win10v2004-20231020-en
General
-
Target
71c7765b389afcf2e1a82fc7474805ba2bb12705e7f41a5d63d5afab9b942601
-
Size
2.4MB
-
MD5
e5d937c0a5ccf7fff68ba9b1a4f9b9ec
-
SHA1
26decc516e74ba68b6661eb8e1998b13e88366bd
-
SHA256
71c7765b389afcf2e1a82fc7474805ba2bb12705e7f41a5d63d5afab9b942601
-
SHA512
278d826478d79e576e4017e46a0f5d37fbf127917fd1ce2b3e85475250400c7061494caad88935140f5be2d56d57e766fad1a690fb697575c7947a7aeb596aa9
-
SSDEEP
49152:XEW0uGF9EXbSXCCqy2QVhzT6SKjCYHp3oGuteuFm52OV+B:X03lOy2QrVKjdHeteAm52OV+B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71c7765b389afcf2e1a82fc7474805ba2bb12705e7f41a5d63d5afab9b942601
Files
-
71c7765b389afcf2e1a82fc7474805ba2bb12705e7f41a5d63d5afab9b942601.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2.1MB
IMAGE_SCN_MEM_READ
VProtect Size: 548KB - Virtual size: 548KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 72KB - Virtual size: 72KB
IMAGE_SCN_MEM_READ