Static task
static1
Behavioral task
behavioral1
Sample
c999caa371245456bb314a47644230b38c5ec109a359871c7ab0ef7d800da32f.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
c999caa371245456bb314a47644230b38c5ec109a359871c7ab0ef7d800da32f.exe
Resource
win10v2004-20231020-en
General
-
Target
c999caa371245456bb314a47644230b38c5ec109a359871c7ab0ef7d800da32f
-
Size
148KB
-
MD5
5c0521d9b6ce39b25196de2d0f7c55fb
-
SHA1
2b5337400bf686ab92c5a74e4d64024a55ec5721
-
SHA256
c999caa371245456bb314a47644230b38c5ec109a359871c7ab0ef7d800da32f
-
SHA512
d273ab4e2ed156ef9f71fe179e933f4aca9403003e8dac78128473eed943586943a956ec629ac08ead8fc2ed060af82c87ab9411d912abf3ab31c2e2a318719b
-
SSDEEP
3072:o1ftffepVP3qsNF++VWxOnfwu7zSZ4IrFp3ocen6a2TzOLgGgew:MVfgP3FZ4x4Z7mWSAPGPN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c999caa371245456bb314a47644230b38c5ec109a359871c7ab0ef7d800da32f
Files
-
c999caa371245456bb314a47644230b38c5ec109a359871c7ab0ef7d800da32f.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE