Static task
static1
Behavioral task
behavioral1
Sample
ff2125d46652920f6dcf0b5591797d51.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ff2125d46652920f6dcf0b5591797d51.exe
Resource
win10v2004-20231215-en
General
-
Target
ff2125d46652920f6dcf0b5591797d51
-
Size
260KB
-
MD5
ff2125d46652920f6dcf0b5591797d51
-
SHA1
434b417ddf61d66af2c5c7c9dcb747a2c6b6ddfa
-
SHA256
7869c9af7ae287043fd521d1e1fc82c954c2bf5f9519d0b0801822324b18ba7b
-
SHA512
1ec65c7a587d790a424a96d5768787ce3c2221eee5d1e26863d6fd42d1f4a2106d167f8921fb728f55cc566808aeab5cd59d4b4be952f2dac1b9ab701872400f
-
SSDEEP
3072:9qNsKLSaXzP/agaqotGvhrSz7501phL+mZl2z5wY8jXx5zg6Fa2Nqy7Gmg:9qNjLS7Lt8hrSz75WrLjl2z5619Qs7O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff2125d46652920f6dcf0b5591797d51
Files
-
ff2125d46652920f6dcf0b5591797d51.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Edy0 Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Edy1 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Edy2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE