Static task
static1
Behavioral task
behavioral1
Sample
61269cf0eab6b32c6840bb75bb19e5ff.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
61269cf0eab6b32c6840bb75bb19e5ff.exe
Resource
win10v2004-20231222-en
General
-
Target
61269cf0eab6b32c6840bb75bb19e5ff
-
Size
205KB
-
MD5
61269cf0eab6b32c6840bb75bb19e5ff
-
SHA1
a4535ef9093192b0e91f0b836720c1a42c856b2f
-
SHA256
e4a4969e079fba422c02ef07412613227583b7f0492b83985cd8f7d8a7e026a2
-
SHA512
1b9f0746df97d65595d4f7a8ae2a8baeaa423221e823c2739d85835a57fa51fa081539b5b98e4e4d2f14a5c23a9e14fadf9fb875855313352554d056a79a9aaf
-
SSDEEP
3072:Zw4ltiaNhyKPE++DIGgm33ss+KKLLpI2mNrGlf3XaKnjz4G9:jt0+pGPt+bJI/NrOf3DY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61269cf0eab6b32c6840bb75bb19e5ff
Files
-
61269cf0eab6b32c6840bb75bb19e5ff.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Shield Size: 512B - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WYCao Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.WYCao Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.WYCao Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.hhqg Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE