Static task
static1
Behavioral task
behavioral1
Sample
224df39837ed1bfc5fa7c8af41735043.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
224df39837ed1bfc5fa7c8af41735043.exe
Resource
win10v2004-20231215-en
General
-
Target
224df39837ed1bfc5fa7c8af41735043
-
Size
944KB
-
MD5
224df39837ed1bfc5fa7c8af41735043
-
SHA1
0219ce0e99a980cfb27fb0228b0731c0da4c352b
-
SHA256
681927eb9b201b8ff4966e788d6ca96dd285ff563db93f1344d483f3d3babb25
-
SHA512
580c811b335256f879014a88284d03c3de53dd500791349138248906f6feefcca7584d2a2b980d2a0ec39d5f0239e7b9dc6b2158520831d7a10fbfe55018299c
-
SSDEEP
12288:QHp2+pCxBujxRbge7ZYlm8lIgmh/dqPfWPdmEfbnrKIncLF224XGX5vnS51IOP+F:c8E8I7CQh/g3WPd5r8V4WX8IOGoQyZKF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 224df39837ed1bfc5fa7c8af41735043
Files
-
224df39837ed1bfc5fa7c8af41735043.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 4KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 525.0MB
.dxeigd Size: 885KB - Virtual size: 888KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ