Static task
static1
Behavioral task
behavioral1
Sample
223408840d2be513cbfd3eb85de5e93b026a3a010b0a8c7214449b5ee310e658.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
223408840d2be513cbfd3eb85de5e93b026a3a010b0a8c7214449b5ee310e658.exe
Resource
win10v2004-20231023-en
General
-
Target
223408840d2be513cbfd3eb85de5e93b026a3a010b0a8c7214449b5ee310e658
-
Size
8.0MB
-
MD5
1bcc3fa0910aed400135c966b94d77ee
-
SHA1
1e84e1358e8d6bea86edbf407476a56ae4282098
-
SHA256
223408840d2be513cbfd3eb85de5e93b026a3a010b0a8c7214449b5ee310e658
-
SHA512
cbc50b9fffa549a606eaf8bc22559aaa8eff8b580e98255f08be5ad7c28ce0113eed9aff2588888e365d431411b6f2405a68f913f7f101fe3346dbf9143b4cef
-
SSDEEP
98304:9SuO1rtkf4BW4RrBg+Has3m+I8H4ubfmWwY3CKao3KtHgE5uXCU0oaL8SS49VJ:9SuOVw+RrBmubxZSoCiCUwxS49V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 223408840d2be513cbfd3eb85de5e93b026a3a010b0a8c7214449b5ee310e658
Files
-
223408840d2be513cbfd3eb85de5e93b026a3a010b0a8c7214449b5ee310e658.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 688KB - Virtual size: 687KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 193KB - Virtual size: 687KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.enigma1 Size: 2.7MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE