Static task
static1
Behavioral task
behavioral1
Sample
0086a4df36da9068ca7bf12f7888b66a.exe
Resource
win7-20231129-en
General
-
Target
0086a4df36da9068ca7bf12f7888b66a
-
Size
5.5MB
-
MD5
0086a4df36da9068ca7bf12f7888b66a
-
SHA1
0be141abd754b8364c1a9c1b3f83efc0317be9ac
-
SHA256
78ca61c520ecbe32e15d55ed927fda0e9290c7e7eb79fd85800c0e6ffed40748
-
SHA512
c09ec576207349cd169bd0322253297504818c296e972297ac9a0162170cbe8595180a17a007ac0db201ed3527c9a146ea77ad0947bf750a92c7eb3b83dc2b66
-
SSDEEP
98304:ZTlzgPdmYdvzJqGbkuvKqdZ98AIEl6ndrz8nyDLAt4A6i9DIb:ZJzkhV3vxD9FerzDLAt4Af9DIb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0086a4df36da9068ca7bf12f7888b66a
Files
-
0086a4df36da9068ca7bf12f7888b66a.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 107KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 47B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.imports Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SHARINGA Size: - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.taggant Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ