Static task
static1
Behavioral task
behavioral1
Sample
cf408007c2ded22f9aa56162674fc4e14ca37b724406bcfe23d8102f63f17d69.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
cf408007c2ded22f9aa56162674fc4e14ca37b724406bcfe23d8102f63f17d69.exe
Resource
win10v2004-20231023-en
General
-
Target
cf408007c2ded22f9aa56162674fc4e14ca37b724406bcfe23d8102f63f17d69
-
Size
4.7MB
-
MD5
83ce629c587d1c7a6ba7e4fab9fe850c
-
SHA1
641153c938aaada79537856739053c6fd75b0d8c
-
SHA256
cf408007c2ded22f9aa56162674fc4e14ca37b724406bcfe23d8102f63f17d69
-
SHA512
671d7bfb7e4311ded0f2620ddd578baa5e836155493f7a6e16ea65a2459ad4824a4ad7f54aa27ab3f7d5a942d7736f00f08f9167260b13df4ae72e1d1377bfcc
-
SSDEEP
98304:8ZVnNOr1bVrL/JTAKhKcH63dYrYgCcfeQJK:CYr1bVrL/JTNiqkvQeQJK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf408007c2ded22f9aa56162674fc4e14ca37b724406bcfe23d8102f63f17d69
Files
-
cf408007c2ded22f9aa56162674fc4e14ca37b724406bcfe23d8102f63f17d69.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 5.3MB
IMAGE_SCN_MEM_READ
vmp Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vmp Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vmp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
vmp Size: 364KB - Virtual size: 364KB
IMAGE_SCN_MEM_READ