Static task
static1
Behavioral task
behavioral1
Sample
26b2ebed6b94fd04e467d5544e980abe.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
26b2ebed6b94fd04e467d5544e980abe.exe
Resource
win10v2004-20231215-en
General
-
Target
26b2ebed6b94fd04e467d5544e980abe
-
Size
4.5MB
-
MD5
26b2ebed6b94fd04e467d5544e980abe
-
SHA1
d49aa1c883286c05462a5974acf24e6317010288
-
SHA256
ca86b0468be3f86c86dbacd8a2f7fb2acf811da983d564fbd15c2d9513a9ecf2
-
SHA512
f85ad5a6967fbf4df8860b1b099b8fbebe28098e6000aaa2fe9a34cd866b4f7f66465a9c0c427add1a203730c84c658a935e6288c2d87c36fa1ab9f2fd252ca7
-
SSDEEP
98304:oFwKLuAk3SebO9i6/8IAaQd1V9JMyvtgoM:AwKLuAxViNaM9xg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26b2ebed6b94fd04e467d5544e980abe
Files
-
26b2ebed6b94fd04e467d5544e980abe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE