Static task
static1
Behavioral task
behavioral1
Sample
ff4c997f44710cae41dbcca0c038987a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ff4c997f44710cae41dbcca0c038987a.exe
Resource
win10v2004-20231215-en
General
-
Target
ff4c997f44710cae41dbcca0c038987a
-
Size
421KB
-
MD5
ff4c997f44710cae41dbcca0c038987a
-
SHA1
0515a004d9488bd62a00878705ce53851ffc2dda
-
SHA256
364451a49fa7449acf550abd88be461d3b5ee6e7790e25a1c0cda696010a16b9
-
SHA512
ec84da7d988bda4e45bd248a7f151b49550c78ca7d542154586e28f823116473e477a29d4a56c5a81a51b543e968c463720ab30bc5db18042259d2a4bf9029e1
-
SSDEEP
6144:TRxLLnDYKKeP1rGdow7/yU1XGh0rEFi+QtPI5aKjgxrorrCbfPX1oCHht0wdp1kG:TDL7sqSdok/LRrEcx+adoG3FphtVZ+XC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff4c997f44710cae41dbcca0c038987a
Files
-
ff4c997f44710cae41dbcca0c038987a.exe windows:4 windows x86 arch:x86
de39dc68941cc6307e3b2590c857a907
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
user32
wsprintfA
advapi32
RegCloseKey
ole32
OleRun
Sections
.text Size: 151KB - Virtual size: 370KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 59KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 68KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE