Static task
static1
Behavioral task
behavioral1
Sample
89653469-b1e8-4af2-9620-0420d2a79c09.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
89653469-b1e8-4af2-9620-0420d2a79c09.exe
Resource
win10v2004-20231020-en
General
-
Target
89653469-b1e8-4af2-9620-0420d2a79c09.unx
-
Size
569KB
-
MD5
4f277730fc3ae34d960355e1cbf9c5c0
-
SHA1
72d8bacc33729e4386778e47ae38c24b16c9523b
-
SHA256
6b323b5c4b72c92c49149982f993a623da23536d67f4863825bc63f26bb25b12
-
SHA512
c5117afa497a63ce79f9394578fe74ea95aee6fa4f6c117a288beacdf93f83c1ccd056b81a80fafb1157b66d8f9a9826632aa6b110184ec68e4e6b0186ce37a1
-
SSDEEP
6144:ZE0sk22K+lk8t5ayDU21BoaSiuX3Vg83chRzXx/7PFYHJUvZIntB3VVV+HSb+anf:Vsk22K+lb6kHQwRJY5z3ZuSBjL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89653469-b1e8-4af2-9620-0420d2a79c09.unx
Files
-
89653469-b1e8-4af2-9620-0420d2a79c09.unx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 355KB - Virtual size: 355KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ