Static task
static1
Behavioral task
behavioral1
Sample
ff2c329c5768b3d1cc9f31d24ece7fad.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ff2c329c5768b3d1cc9f31d24ece7fad.exe
Resource
win10v2004-20231222-en
General
-
Target
ff2c329c5768b3d1cc9f31d24ece7fad
-
Size
1.8MB
-
MD5
ff2c329c5768b3d1cc9f31d24ece7fad
-
SHA1
11b44c95f60fbf9226fdcdd54666106e813b0c47
-
SHA256
77e494f1036594bd47e52f67db825c1fdfeed8d60a94f06e0b000026cb640f7d
-
SHA512
880fa9add67b5001ca6cf051602175c512aaf4c93a1b84e703d14a3220abb362f6d60ac8e55f3ede7a43f3af0d4d2d2e2a5d0c903554b92e3f06e99170db86b9
-
SSDEEP
3072:eiX07XCElJ8yfRutxyYva9NnX5ORR3LEAgg83S:rkLkxyYA5OjLEAyS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff2c329c5768b3d1cc9f31d24ece7fad
Files
-
ff2c329c5768b3d1cc9f31d24ece7fad.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ