Static task
static1
Behavioral task
behavioral1
Sample
f2a9ae2394b490e67c77e20ec1ce0d967aea174ec159285650cef9f39cf0d68b.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
f2a9ae2394b490e67c77e20ec1ce0d967aea174ec159285650cef9f39cf0d68b.exe
Resource
win10v2004-20231020-en
General
-
Target
f2a9ae2394b490e67c77e20ec1ce0d967aea174ec159285650cef9f39cf0d68b
-
Size
213KB
-
MD5
b3b05042b0cbd6cbc064e9eb0f4bfc9e
-
SHA1
7815529047ae0856dc28594458e7d96ab986b253
-
SHA256
f2a9ae2394b490e67c77e20ec1ce0d967aea174ec159285650cef9f39cf0d68b
-
SHA512
ca16926dec6ecfceec09bf86fbd24544dcfeab84845bc4a8cc39ac185f015c3720d0d06bba9a8488cecb9f3b504fc3e23718eb702956616fc659c204695b5039
-
SSDEEP
3072:sAyL9W0ElYKXGMvJftffjmNoxELPJXkfbDpB:EL5Ej2MpVfjmN1LRUPpB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2a9ae2394b490e67c77e20ec1ce0d967aea174ec159285650cef9f39cf0d68b
Files
-
f2a9ae2394b490e67c77e20ec1ce0d967aea174ec159285650cef9f39cf0d68b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.Upack Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE