Static task
static1
Behavioral task
behavioral1
Sample
141aa688070a1c06b543a971323aa9ba.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
141aa688070a1c06b543a971323aa9ba.exe
Resource
win10v2004-20231215-en
General
-
Target
141aa688070a1c06b543a971323aa9ba
-
Size
43KB
-
MD5
141aa688070a1c06b543a971323aa9ba
-
SHA1
169f56d1b49ad72c22bc61e597665706ddac64cf
-
SHA256
5649b7d0cc2be7632fe31ffaf0d6827b679523d0e18de642d63a3c176a60b09c
-
SHA512
073fe6eb12329f45ab30d699b1c97a2e26477362e5d3c316b710716cc9fe53340a5cc1d53f23fd9981ba4c1668f71a3899efcd43e358d9d3ceea3d10d2755703
-
SSDEEP
384:Q6/8gbmQUIA9gDhZvk99MuN/rwmDWcTT:m6mQUN+hZvqwmDWS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 141aa688070a1c06b543a971323aa9ba
Files
-
141aa688070a1c06b543a971323aa9ba.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�U_� Size: 700KB - Virtual size: 700KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 500KB - Virtual size: 500KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE