Static task
static1
Behavioral task
behavioral1
Sample
70faab3b3ae4fd138b41adad06420996.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
70faab3b3ae4fd138b41adad06420996.exe
Resource
win10v2004-20231215-en
General
-
Target
70faab3b3ae4fd138b41adad06420996
-
Size
512KB
-
MD5
70faab3b3ae4fd138b41adad06420996
-
SHA1
b7ba1993a6b3225333bd91f391bd04b610f26755
-
SHA256
2e26a572c5d98fc6d774544445a21b524fae6f5240e2dfb064518a63c8004107
-
SHA512
2689958ff0285ea6081ab9b6315776638da86db93f9ab3b58fe6692eb117d3502a7df6cc0dd7abb2a391aa9cfb9781d04600a0f80c5bb987e3b8717a6b726baf
-
SSDEEP
12288:zUJvRTqPUfMZmSe1AHhKMa0QmVn4vottRiq3U3:zkRTqnZ7FH4MaTkn4vow5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70faab3b3ae4fd138b41adad06420996
Files
-
70faab3b3ae4fd138b41adad06420996.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 885KB - Virtual size: 888KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 347B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE