Static task
static1
Behavioral task
behavioral1
Sample
680ae16733eb76d36ded5865d36cf9ad.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
680ae16733eb76d36ded5865d36cf9ad.exe
Resource
win10v2004-20231222-en
General
-
Target
680ae16733eb76d36ded5865d36cf9ad
-
Size
21KB
-
MD5
680ae16733eb76d36ded5865d36cf9ad
-
SHA1
0aafcb80abe6483039ee0d91ef9faf7caed5a423
-
SHA256
06f98c041702713a219a97766b317914f898ac4f3f1e732e1880a705f5a8a166
-
SHA512
dcaba5ee529087661db7e6d47a040f4f9a77880bc5f7097c608f92dea04ad707d8d8e2796620bce27a16beecc1c0008e05a4306ea6f67f3eb88e1035d25cdc05
-
SSDEEP
384:XcY9H8nJZaPbUx7nLnkFPIOJej9o/8vWqCNsKlOs6Q:XcY9HsjazOb7kFwOJeVeaZs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 680ae16733eb76d36ded5865d36cf9ad
Files
-
680ae16733eb76d36ded5865d36cf9ad.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
;F�lO6� Size: - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�+v�a{�� Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE