Static task
static1
Behavioral task
behavioral1
Sample
ff35c84e1548414a2afb5a76b171c79b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ff35c84e1548414a2afb5a76b171c79b.exe
Resource
win10v2004-20231215-en
General
-
Target
ff35c84e1548414a2afb5a76b171c79b
-
Size
674KB
-
MD5
ff35c84e1548414a2afb5a76b171c79b
-
SHA1
82ecdc43e1bfa3e2de6cc21bec3be40fa6671924
-
SHA256
c1b299bf25c2743625d6637591d2a0054b897efdd0d0358e0da9c0fd605ecfe0
-
SHA512
906d797c498dd99b5b338ca6816647b825195cf2e9a966236edb6bac058c04151013680fe9d58129a946ff3d19afd1ff711b7ff530d550b8baa8b5b1b092c180
-
SSDEEP
12288:ZJ8SNnSwlhUHP2wtJAoisJRHP6z6SXVF9EIuTHKoxwOtWR:ZOC3lhUHVLJPY6SXxSTHlVt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff35c84e1548414a2afb5a76b171c79b
Files
-
ff35c84e1548414a2afb5a76b171c79b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 149KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 74KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 354KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE