Static task
static1
Behavioral task
behavioral1
Sample
868b2271445d2ffc5b4dab58848e38d4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
868b2271445d2ffc5b4dab58848e38d4.exe
Resource
win10v2004-20231215-en
General
-
Target
868b2271445d2ffc5b4dab58848e38d4
-
Size
13.0MB
-
MD5
868b2271445d2ffc5b4dab58848e38d4
-
SHA1
fefefa4e14bc45954cd8c5f1fa1829737c072909
-
SHA256
a0c7ccdc72ced495bf871c33818925cf71bf3b58e4f9337bbc70bc6423dc19ef
-
SHA512
342cbe282e054bfe8a2b432474893b12e2e5ebc263fe1e99ad447e8924f1eeb209cd04321620bde6f2dbee337b0f4cbecbabf8d21500c7e2e9b83e63ce67c329
-
SSDEEP
393216:U+Orr5G/9RI9b7SOrr5G/9nOrr5G/9RI9b7SOrr5G/9I:XOH5kw9b+OH5khOH5kw9b+OH5ku
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 868b2271445d2ffc5b4dab58848e38d4
Files
-
868b2271445d2ffc5b4dab58848e38d4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 1.4MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 214KB - Virtual size: 214KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ