Static task
static1
Behavioral task
behavioral1
Sample
cf187f80e602ebb9f08e67ae979d36670cebe201d316a3b5c5fab86e4454709c.exe
Resource
win7-20231025-en
General
-
Target
cf187f80e602ebb9f08e67ae979d36670cebe201d316a3b5c5fab86e4454709c
-
Size
645KB
-
MD5
c39788b7af2300e40bd07446480ad8fa
-
SHA1
ac7594ce5a411e6081432f40c3f432c93cfb3c5b
-
SHA256
cf187f80e602ebb9f08e67ae979d36670cebe201d316a3b5c5fab86e4454709c
-
SHA512
cc28ec069bc528b5bc1707f91d20d7c066a7ddf09700c01b95b6a35f36cc04dc3cf0368a9fe625b58edd23757f26aebd221ffb838c0460d3e2349131d5d51a6e
-
SSDEEP
6144:+ORr7aznJ/gCbMbbbb2dXYvwn3bKEnWUE9oc6ZxSEKvNuNw07cI9UIMY7PlAE8b:3r+lIwrzaK/1C0v94W9Ab
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf187f80e602ebb9f08e67ae979d36670cebe201d316a3b5c5fab86e4454709c
Files
-
cf187f80e602ebb9f08e67ae979d36670cebe201d316a3b5c5fab86e4454709c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 644KB - Virtual size: 648KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE