Static task
static1
Behavioral task
behavioral1
Sample
f2ad2a2244ba68073ad27af9c812d9a2887cbb27e1346e637957b9aaebb79db3.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
f2ad2a2244ba68073ad27af9c812d9a2887cbb27e1346e637957b9aaebb79db3.exe
Resource
win10v2004-20231023-en
General
-
Target
f2ad2a2244ba68073ad27af9c812d9a2887cbb27e1346e637957b9aaebb79db3
-
Size
1.3MB
-
MD5
d615fb6f4b139c9474b3e8309912cc94
-
SHA1
3d8b80d7207b67bb8a00393db3f7188a0a285ddf
-
SHA256
f2ad2a2244ba68073ad27af9c812d9a2887cbb27e1346e637957b9aaebb79db3
-
SHA512
1fb9b8563a4e37c5ca8c1562bd4f7a749ccac05975b09b2843a81d3ba261c3787ec7ed9dcfabc27879a5af3f7a96b6285324e4545e8b8e6012c581b7fbbfc4f7
-
SSDEEP
24576:jGvrY3tcr1R2ydMQULhbeeE7xoD46mJvC0wErDpGvrY3tcr1R2ydMQULhbeeE7xm:jLN+GE3pLN+GE3Ux
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2ad2a2244ba68073ad27af9c812d9a2887cbb27e1346e637957b9aaebb79db3
Files
-
f2ad2a2244ba68073ad27af9c812d9a2887cbb27e1346e637957b9aaebb79db3.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 314KB - Virtual size: 314KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE