Static task
static1
Behavioral task
behavioral1
Sample
2291b92a13516f3ff039bf206fedb7ff.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2291b92a13516f3ff039bf206fedb7ff.exe
Resource
win10v2004-20231215-en
General
-
Target
2291b92a13516f3ff039bf206fedb7ff
-
Size
169KB
-
MD5
2291b92a13516f3ff039bf206fedb7ff
-
SHA1
45736890c2b2d80a1c3097207c381ef688f18416
-
SHA256
dd6b0a9755b492b22ca16a23bba3b78d5d8566277ee0d9409b583bea3d74550c
-
SHA512
d4204f5080366a6017e8c956f0d2018e233b1f6eb8ec4fa05827b05e5e1e5ca0ae63f2ed1444a714e2369cbc1de1ffa484046071c55e1d791983ed293804f383
-
SSDEEP
3072:9C7Hwbw1LTPYCsB+NPu1lp+fxJgaZvr2IF6+LOPfuE5KBY2a8Xfxmiuizz1Tv+6O:9C7Hwbw1LYUNPu1z12vh6+LOHr5KBYPp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2291b92a13516f3ff039bf206fedb7ff
Files
-
2291b92a13516f3ff039bf206fedb7ff.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
obr49er5 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ss Size: 144KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ceor Size: 24KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE