Static task
static1
Behavioral task
behavioral1
Sample
35176fbdc2256a61bf2c3d37c4e568d5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
35176fbdc2256a61bf2c3d37c4e568d5.exe
Resource
win10v2004-20231215-en
General
-
Target
35176fbdc2256a61bf2c3d37c4e568d5
-
Size
1.5MB
-
MD5
35176fbdc2256a61bf2c3d37c4e568d5
-
SHA1
d808ddfdf9e361fab35c77c1c2f65f6e8a0463f7
-
SHA256
dbda020b6931b2c8c20407702c9257097cdf215c55cef624dac7ec820ddd949d
-
SHA512
9ffb01c19f1c633ac572e546e0ac352af62b7ba3826c8d2b00f98f83105a86cf8b36ae972241da38a87a49bcca38795c57ad52e008f660db48d1e1f706083859
-
SSDEEP
49152:IcSHKKhDGqNiD95JLZhFs7QUamXB4f5O7v:IPKKtG04LZhmfa0qY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35176fbdc2256a61bf2c3d37c4e568d5
Files
-
35176fbdc2256a61bf2c3d37c4e568d5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: 512B - Virtual size: 12.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE