Static task
static1
Behavioral task
behavioral1
Sample
ff87b60468146e0c15d04230cccb8d3f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ff87b60468146e0c15d04230cccb8d3f.exe
Resource
win10v2004-20231215-en
General
-
Target
ff87b60468146e0c15d04230cccb8d3f
-
Size
241KB
-
MD5
ff87b60468146e0c15d04230cccb8d3f
-
SHA1
5e5d2092d50a29caf9ead90df7608a0f0bda3a83
-
SHA256
343211355c650db7b8835bb87983bca28981aeda7eb8f6f17f4ff35c34d0e844
-
SHA512
c49c87133f47339ab8cd1d636135e39bdf67e3a61cfd5b6cc6713ec8f05febd0576698d2eb55e9bb93b075d89536f80581a5dcd0e524747bb9c3afdcd3c389ab
-
SSDEEP
6144:mEL+rabFzhejp8TUMKJcytBJPhUlj/33JFHumBqAkBjp:mU++Fzhel8iTFhoj3Hpq3p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff87b60468146e0c15d04230cccb8d3f
Files
-
ff87b60468146e0c15d04230cccb8d3f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 240KB - Virtual size: 721KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ