Static task
static1
Behavioral task
behavioral1
Sample
ff11623f4fe801029ebdde4df2fd3199.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ff11623f4fe801029ebdde4df2fd3199.exe
Resource
win10v2004-20231215-en
General
-
Target
ff11623f4fe801029ebdde4df2fd3199
-
Size
241KB
-
MD5
ff11623f4fe801029ebdde4df2fd3199
-
SHA1
f7ba60084511ce52b7d38ca8f78a9ad03ccfd493
-
SHA256
10e094624c84acc5c2b5e300c4db0ec5cd2c2e007ae2741cfde27fc78f2b5b0a
-
SHA512
7baf5992e3232d7e7fccc2b2adacea22d07f9908603659ae7c87649770ee6883cf3582caa9418ee4db6b8b28a1eab94fb78bc1eb322b6b4781fcb00dffc2cd97
-
SSDEEP
6144:rJ6F8CSyEnLp7KPplwj3CG/Hm8p5bRkpxCK5/GhorQycjDC4nu:C8CSyOKPuCGXTKvyo8xju4u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff11623f4fe801029ebdde4df2fd3199
Files
-
ff11623f4fe801029ebdde4df2fd3199.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 240KB - Virtual size: 721KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ