Static task
static1
Behavioral task
behavioral1
Sample
af8412d7f4d7f7854d9c71ddb588dffe9ed287845bbdb85d8d288bef416c2572.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
af8412d7f4d7f7854d9c71ddb588dffe9ed287845bbdb85d8d288bef416c2572.exe
Resource
win10v2004-20231020-en
General
-
Target
af8412d7f4d7f7854d9c71ddb588dffe9ed287845bbdb85d8d288bef416c2572
-
Size
1.2MB
-
MD5
835d0b3fb266dd9fdfa6a6dadcf66aa8
-
SHA1
0b05bf9aab6684507edae39e4fab32983ddfd97b
-
SHA256
af8412d7f4d7f7854d9c71ddb588dffe9ed287845bbdb85d8d288bef416c2572
-
SHA512
66dc73a8b48158073c8de8e68097c9fc59669daf29d758c1f5984d0411ca4e0885057ab4536437d0394b61df0f47072c18bde814bcd75583665378a450dd3991
-
SSDEEP
24576:6mIvg5+el7nRSDspAKmnLVcbo8FHeAbvjWMs4aBCu:6mIIp1nWcUgVWpZBCu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af8412d7f4d7f7854d9c71ddb588dffe9ed287845bbdb85d8d288bef416c2572
Files
-
af8412d7f4d7f7854d9c71ddb588dffe9ed287845bbdb85d8d288bef416c2572.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 27KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 186KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 961KB - Virtual size: 964KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE