Static task
static1
Behavioral task
behavioral1
Sample
690ab7dc3e868b95423e5a4988bd279e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
690ab7dc3e868b95423e5a4988bd279e.exe
Resource
win10v2004-20231215-en
General
-
Target
690ab7dc3e868b95423e5a4988bd279e
-
Size
198KB
-
MD5
690ab7dc3e868b95423e5a4988bd279e
-
SHA1
7404effaaf93b892026c22e865fe807b5f19a209
-
SHA256
bddfeef1bf1c1dd644d29fbbbccc8f1cc5a738c54cfdbaf5a444764cff41f304
-
SHA512
0ca39d84105ab8ad4a68b923e46c161c554b7b67b558c7d8f7295c35b5ebbb441e866fb13cebd8819108fca94fa75bec660acc70cf608ef2a3f42f6f2ddf4b53
-
SSDEEP
3072:gvuRuTGctGBGp1fn1JINh1WRxLN5iN9OXKnsLSHt6Yn0RolRRo9a5Paow6FikyQ:gvsu6c1p1fTINqkts+HfooZoiE6Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 690ab7dc3e868b95423e5a4988bd279e
Files
-
690ab7dc3e868b95423e5a4988bd279e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.9k4ote Size: 1KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.79$v7i Size: - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mw4m$2 Size: - Virtual size: 11.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oz7i9e Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.q5sin$ Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: - Virtual size: 3.0MB
.null Size: - Virtual size: 420KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.loader Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE