Static task
static1
Behavioral task
behavioral1
Sample
69e43a6197167e939816884636948814.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
69e43a6197167e939816884636948814.exe
Resource
win10v2004-20231215-en
General
-
Target
69e43a6197167e939816884636948814
-
Size
142KB
-
MD5
69e43a6197167e939816884636948814
-
SHA1
b611821ecc1c42ae9914f6a5111ca4a5944ca6bb
-
SHA256
cabbc4c1b34e1b852002a970ccc6a85a494ea6c0262f807853ab2a0dd0ce689f
-
SHA512
e73633e434347f6af3d9e2e3762a4e84be81275141db067e4f3b28ab7b485272f77087f2e848bfa5ca7dcab9117a167864bee69202e68f47731fd8c2fe88bbff
-
SSDEEP
3072:yfgCKYFsr78grQkPNvbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU744gOc:eKJr78gckljwvP6bQ7yMP+DE82744s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69e43a6197167e939816884636948814
Files
-
69e43a6197167e939816884636948814.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 31KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gogoloa Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE