Static task
static1
Behavioral task
behavioral1
Sample
0a7842086a853d00368d611f5cf710fb3ee095231bba5e03119f829a67dd1446.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
0a7842086a853d00368d611f5cf710fb3ee095231bba5e03119f829a67dd1446.exe
Resource
win10v2004-20231023-en
General
-
Target
0a7842086a853d00368d611f5cf710fb3ee095231bba5e03119f829a67dd1446
-
Size
4.9MB
-
MD5
fcd0997692ee282c10864c143b3fb816
-
SHA1
23c33cf0390604c331f87f1cdf40d767c4e85d45
-
SHA256
0a7842086a853d00368d611f5cf710fb3ee095231bba5e03119f829a67dd1446
-
SHA512
bda513758c8eafaa70aa07cdd57b92a5b3d7e2912395bdac125b63228c6993ba795d74da08118d0ffd86c5fdd9604be76aadd2de3c4b079903592beeeda3461b
-
SSDEEP
98304:e7lm7qctnyQT0WCGQdNo2DInydPhwWxLMs2NuTllwMcwg1BH:Y+qCyQCGIolydpwWxLR2sllIH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a7842086a853d00368d611f5cf710fb3ee095231bba5e03119f829a67dd1446
Files
-
0a7842086a853d00368d611f5cf710fb3ee095231bba5e03119f829a67dd1446.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 2.7MB
IMAGE_SCN_MEM_READ
YZWLQLXY Size: 615KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
YZWLQLXY Size: 4.3MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
YZWLQLXY Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
YZWLQLXY Size: 19KB - Virtual size: 20KB
IMAGE_SCN_MEM_READ