Static task
static1
Behavioral task
behavioral1
Sample
0628b874a3a3ea95f6ce737fddbba7f779e0f8f4d42ddc6677d9a0e39a76c76f.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
0628b874a3a3ea95f6ce737fddbba7f779e0f8f4d42ddc6677d9a0e39a76c76f.exe
Resource
win10v2004-20231020-en
General
-
Target
0628b874a3a3ea95f6ce737fddbba7f779e0f8f4d42ddc6677d9a0e39a76c76f
-
Size
176KB
-
MD5
c3ef3ac3f32895a46763cae8616bf681
-
SHA1
a3f55111ec6a1de370921ebba549ebaac304bded
-
SHA256
0628b874a3a3ea95f6ce737fddbba7f779e0f8f4d42ddc6677d9a0e39a76c76f
-
SHA512
41e7bf350c33b79514ed8bd1eb2c0052f26cc3e7842a707e9641145e48f50eff3e4dc4c51166752097a79640919780ebb4662bf9192fe576e3794509475d034f
-
SSDEEP
1536:qjMqxL2Q3qOLj5MtVlyEeRupqYYQe4X4xy/vJfgLdQAQfcfymNG+Kx+:sAyL9W0ElYKXGMvJftffjmNox+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0628b874a3a3ea95f6ce737fddbba7f779e0f8f4d42ddc6677d9a0e39a76c76f
Files
-
0628b874a3a3ea95f6ce737fddbba7f779e0f8f4d42ddc6677d9a0e39a76c76f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.Upack Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE