Static task
static1
Behavioral task
behavioral1
Sample
c491a14072b3753301322d6ca6d4b7f143962ce1dd0fbd2af70845fbff8e84fd.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
c491a14072b3753301322d6ca6d4b7f143962ce1dd0fbd2af70845fbff8e84fd.exe
Resource
win10v2004-20231025-en
General
-
Target
c491a14072b3753301322d6ca6d4b7f143962ce1dd0fbd2af70845fbff8e84fd
-
Size
287KB
-
MD5
29a77f9210a30f4795e2b048cd8dca62
-
SHA1
6c8e2f72461bace137bdb860923744449fb2b868
-
SHA256
c491a14072b3753301322d6ca6d4b7f143962ce1dd0fbd2af70845fbff8e84fd
-
SHA512
3199f0812a0aa4e8aa8c4c248c7587a255af49bc51e2d1691acfaaf708b60507baf50c8a2c4b39313bbb632af57e93a279d1cdd70c57e7405a9a1d9cae61ef5b
-
SSDEEP
1536:iAULAUIAUvAUeAUaAUIAUKAUIAUmAUCAULAUIAUvAUeAUaAUIAUKAUIAUmAUsAUv:qJwNGCwSwOKJwNGCwSwO0JwNGCwSwOU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c491a14072b3753301322d6ca6d4b7f143962ce1dd0fbd2af70845fbff8e84fd
Files
-
c491a14072b3753301322d6ca6d4b7f143962ce1dd0fbd2af70845fbff8e84fd.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE