Static task
static1
Behavioral task
behavioral1
Sample
33ff56e23082373a3f4c2df5902560db.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
33ff56e23082373a3f4c2df5902560db.exe
Resource
win10v2004-20231215-en
General
-
Target
33ff56e23082373a3f4c2df5902560db
-
Size
389KB
-
MD5
33ff56e23082373a3f4c2df5902560db
-
SHA1
131ed018f4895e7e7a791853793c0f47b9fc0ef6
-
SHA256
14d36ab45d512a4b97866b65ef80b0afdcdb07d86e7d644b33c3224d0abf78de
-
SHA512
54b1a31c15cd1f06c45ffed290f3cfd1cc5427fddee78e9aadec8a4b487567cbf1876d94fa1138630ef12adae52e77a0ce4bcf17a2363ab4c86a69dc0190762a
-
SSDEEP
6144:DDL7lKbAlMg/ypNGBDYw0YE7nZPVR9z1K4TI3zWxLCS8uQmYbrrYAqYOhYa:LBlMCu7Z51K4izGxP+PJqYQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33ff56e23082373a3f4c2df5902560db
Files
-
33ff56e23082373a3f4c2df5902560db.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uro Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE