Static task
static1
Behavioral task
behavioral1
Sample
af047988b4aac732bb2170d21aeb500c29c73cc1bd8a1464cf14234130b53a68.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
af047988b4aac732bb2170d21aeb500c29c73cc1bd8a1464cf14234130b53a68.exe
Resource
win10v2004-20231127-en
General
-
Target
af047988b4aac732bb2170d21aeb500c29c73cc1bd8a1464cf14234130b53a68
-
Size
2.5MB
-
MD5
88fe6af5621d0c427ed3e5409faf627d
-
SHA1
20bb4297c5d1ed1f558b4e0a1cd1b7d4a0e1c7b1
-
SHA256
af047988b4aac732bb2170d21aeb500c29c73cc1bd8a1464cf14234130b53a68
-
SHA512
fa91761b3164d5ab77e6453bc0f3574e1893a9b041ae47fc66d7c8d716f290c3c205870e527a989ffe0db9ae4b9d0c16c327a403762ac70d921cb58e8c8bd8c0
-
SSDEEP
49152:NBK9Ck5MOy8EK0uREiv6yq/cj332WpyeA2NiijZMNs39dvNfsg0O2iy:G95Os0uRH2cb32peLNFjWN4vrp2v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af047988b4aac732bb2170d21aeb500c29c73cc1bd8a1464cf14234130b53a68
Files
-
af047988b4aac732bb2170d21aeb500c29c73cc1bd8a1464cf14234130b53a68.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
1xBquhtR Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XeBtuhbK Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
mEPUFwNz Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dSYNWzhy Size: 958B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GQ0UcdUh Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
EvoLOity Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ