Static task
static1
Behavioral task
behavioral1
Sample
42ef9df3b68d4db0b471477dfaf245a859df2e6c34ec3fce5f97c40550a951f0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
42ef9df3b68d4db0b471477dfaf245a859df2e6c34ec3fce5f97c40550a951f0.exe
Resource
win10v2004-20231023-en
General
-
Target
42ef9df3b68d4db0b471477dfaf245a859df2e6c34ec3fce5f97c40550a951f0
-
Size
1.3MB
-
MD5
050e07f5fdd5281ef93996ec6f57b78a
-
SHA1
33d9277f7b4d2ea69b034e2a3c54f43152978164
-
SHA256
42ef9df3b68d4db0b471477dfaf245a859df2e6c34ec3fce5f97c40550a951f0
-
SHA512
6635cd56e03e079f159a27eb35bd98b76e2dc567b1f9e3dd87aace7a94769de8196e9a71a013bf0029837ad2e992068273d9b0fd9a7b9bb9e57215296ab5c9fb
-
SSDEEP
24576:SbBVxN//B3hKCB+tQ9BY3QA0DMkHz3XXWt3n8Vn:+DdhKCB+WMQDXS8l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42ef9df3b68d4db0b471477dfaf245a859df2e6c34ec3fce5f97c40550a951f0
Files
-
42ef9df3b68d4db0b471477dfaf245a859df2e6c34ec3fce5f97c40550a951f0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.5MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 636KB - Virtual size: 644KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 100KB - Virtual size: 100KB
IMAGE_SCN_MEM_READ