Static task
static1
Behavioral task
behavioral1
Sample
f86c98a44255331d4f17666460eb9f664cb0c46458baf40f149b51ac155f9d56.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
f86c98a44255331d4f17666460eb9f664cb0c46458baf40f149b51ac155f9d56.exe
Resource
win10v2004-20231020-en
General
-
Target
f86c98a44255331d4f17666460eb9f664cb0c46458baf40f149b51ac155f9d56
-
Size
14.5MB
-
MD5
d4f3ee0fafa66f2e3b028e01c717a548
-
SHA1
6ea7b04205f6613151db7f2828279e2be82e1ffc
-
SHA256
f86c98a44255331d4f17666460eb9f664cb0c46458baf40f149b51ac155f9d56
-
SHA512
0ef834890d56f1d4cb81df8d377dce7bf740006ef09bb738e8878bcb295210fe5be5b065f0f6d168b04cbc81c6b493c4018b36f76c80fb2177780d08dc3792b6
-
SSDEEP
393216:ALTmINBkExhHDa76y36a2/bdakwQW4aFW:ALb/D876va20QWDA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f86c98a44255331d4f17666460eb9f664cb0c46458baf40f149b51ac155f9d56
Files
-
f86c98a44255331d4f17666460eb9f664cb0c46458baf40f149b51ac155f9d56.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 613KB - Virtual size: 5.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE