Static task
static1
Behavioral task
behavioral1
Sample
17ffff2c2d91d398a35e314a866199af.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
17ffff2c2d91d398a35e314a866199af.exe
Resource
win10v2004-20231215-en
General
-
Target
17ffff2c2d91d398a35e314a866199af
-
Size
270KB
-
MD5
17ffff2c2d91d398a35e314a866199af
-
SHA1
388143d97213c5b2caf71d5f3ac43864f02f7e8b
-
SHA256
d1b5d5bfc2d7fcded58cae086e472b13cc66deb01010924706113cf8d7a2f082
-
SHA512
fc94d732203299422d6c8a42c01cd6b87bf5399dd8db2c13e5c9250fee3f2ced396aab335480ce5ec1b379ba83e66c6f7685647b353a5ca42ac7b7a8dd9af2d9
-
SSDEEP
6144:SC1ifSo/IYzPI4sBvj73IXXOvPA27R70UUoK9erBDTJrqGvd9arbpN:B107wYD4BvjgenN7RgUt8eFxW08N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17ffff2c2d91d398a35e314a866199af
Files
-
17ffff2c2d91d398a35e314a866199af.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 232KB - Virtual size: 471KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nProtect Size: 10KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE