Static task
static1
Behavioral task
behavioral1
Sample
f40ac318f32ed7bfe8b2270e6b791118673ac5ba16e63e64ad043e814c2cccba.exe
Resource
win10v2004-20231130-en
General
-
Target
f40ac318f32ed7bfe8b2270e6b791118673ac5ba16e63e64ad043e814c2cccba
-
Size
2.1MB
-
MD5
368c9fbd3aec463fd59084866e2816f6
-
SHA1
818c2acc43874ad107e06f9b7e7076554d1d3767
-
SHA256
f40ac318f32ed7bfe8b2270e6b791118673ac5ba16e63e64ad043e814c2cccba
-
SHA512
d7fb4df7e8cd5ea228518ab351b73e87b5d2df3253efcde154b055162cb6e0397210131b096257cffe8d688fb5c782fb976e0343c76f4e25cd4709b114f603da
-
SSDEEP
49152:8u+HeVg053zpblZJxR6sWKodAJD90LtSpfHCLrGX5:8u+HmtpFHlIGt90LtSpfHWrG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f40ac318f32ed7bfe8b2270e6b791118673ac5ba16e63e64ad043e814c2cccba
Files
-
f40ac318f32ed7bfe8b2270e6b791118673ac5ba16e63e64ad043e814c2cccba.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 863KB - Virtual size: 864KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 959KB - Virtual size: 960KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE