Static task
static1
Behavioral task
behavioral1
Sample
f90c5bf8501bbdae9f2efc434253c58b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f90c5bf8501bbdae9f2efc434253c58b.exe
Resource
win10v2004-20231215-en
General
-
Target
f90c5bf8501bbdae9f2efc434253c58b
-
Size
353KB
-
MD5
f90c5bf8501bbdae9f2efc434253c58b
-
SHA1
6c0dc1e353925a8b043c29c13bc8a027eca0821e
-
SHA256
e8aeba248e702a6b90078a2be55789cd63d5d56b204fa5636398f309cf85af01
-
SHA512
396e99932a2ac6950410ae7598acf1afac3e2e794b33196603f49fd675e6646289a0b8063e6f3a055c9e61f13fa40f8eda52736c3a271f91dfaa11b2944b9711
-
SSDEEP
6144:jJEtwZzEtctZ6SdKRVfPxonYLZ4A+DJRaFGq7gxF4GKMwLMAPRzG60v4UYEgS6Ln:w8AcP6SSoYeVDLyGqQ1/wLMAM6Y4UYEM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f90c5bf8501bbdae9f2efc434253c58b
Files
-
f90c5bf8501bbdae9f2efc434253c58b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.petite Size: 328KB - Virtual size: 796KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE