Static task
static1
Behavioral task
behavioral1
Sample
222880d8012ff459cbfb693c1489970f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
222880d8012ff459cbfb693c1489970f.exe
Resource
win10v2004-20231222-en
General
-
Target
222880d8012ff459cbfb693c1489970f
-
Size
422KB
-
MD5
222880d8012ff459cbfb693c1489970f
-
SHA1
7a931d42bc4c5d650b1b05f5b9066c32cc372037
-
SHA256
ed942da0b56a7fe6af270e608edf5a8c9d1a5c4f7d098c34424f7421a165116c
-
SHA512
eade3ea154aba343d71474461a7cd1e7aaef038a8aefc2a2d20bafa1b679c00ffbf123e0c5631346aa77742854f5c20cab9aacf2dbb335bfb145f40f1effc842
-
SSDEEP
12288:ysHIB7QkKRaug8yeikCykaAOl13l0Pz8MBqIa:ysHU7+h5yeilykkln0PzZBqIa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 222880d8012ff459cbfb693c1489970f
Files
-
222880d8012ff459cbfb693c1489970f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 243KB - Virtual size: 251KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ