Static task
static1
Behavioral task
behavioral1
Sample
f86ec1620f15a44c8c9d3678affe6ace.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f86ec1620f15a44c8c9d3678affe6ace.exe
Resource
win10v2004-20231215-en
General
-
Target
f86ec1620f15a44c8c9d3678affe6ace
-
Size
119KB
-
MD5
f86ec1620f15a44c8c9d3678affe6ace
-
SHA1
2895e5bd8dcc75842db86ae562ccb6f2f8bb98df
-
SHA256
e91941d6c72c3dd22b848290d79ad273491e628b0306ab6b1a45c6b38c729039
-
SHA512
c4556d61fd69913613cfe5f2ea385a0cf8f3c2fa71a7f6ea1b21f8fe19422053afc47b05ec8e8632ff8d3ef3f64dbf14ac8597c8e6842a728e41a748c14869ac
-
SSDEEP
3072:ZcxORQcwSSSwNXWngWWX9oYxMxUduNnTZdDWh4E:BRaFknEouMxKuB1dDW/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f86ec1620f15a44c8c9d3678affe6ace
Files
-
f86ec1620f15a44c8c9d3678affe6ace.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 118KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE