Static task
static1
Behavioral task
behavioral1
Sample
071f801b3afcc61f99125c3b4a4db844.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
071f801b3afcc61f99125c3b4a4db844.exe
Resource
win10v2004-20231215-en
General
-
Target
071f801b3afcc61f99125c3b4a4db844
-
Size
171KB
-
MD5
071f801b3afcc61f99125c3b4a4db844
-
SHA1
370f9aace4906cc8ca2f4a4fed50e6e4316e359a
-
SHA256
55b3f4a53f723f27861459ab9d99471dde70434e75d16a778998e6ef5706bf67
-
SHA512
0ee75a2144d4eb6ac289d2754313f91bf28196fb5867b70eacba5222203feb552c7b27f99a7348361bb3e47f526a3108b40ab640524fbc58eb913a4f2c7e3bb0
-
SSDEEP
3072:yzSe9YZEdzkZD/AONBf6KMrU3MIml5w5Q:yzrKSdzSDV7Y3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 071f801b3afcc61f99125c3b4a4db844
Files
-
071f801b3afcc61f99125c3b4a4db844.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
z6rc0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
z6rc1 Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
z6rc2 Size: 667B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE