Static task
static1
Behavioral task
behavioral1
Sample
020d3b769d3c846cb86e321c211cc631.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
020d3b769d3c846cb86e321c211cc631.exe
Resource
win10v2004-20231215-en
General
-
Target
020d3b769d3c846cb86e321c211cc631
-
Size
385KB
-
MD5
020d3b769d3c846cb86e321c211cc631
-
SHA1
0890e880641448348702340872cebddc323f64a0
-
SHA256
b8206fd6322c412604dc014890c9d42aa00c500a7ca1483fffceb45dd4400cbb
-
SHA512
34c0c857b8f2dce0399ddf9f5152d61a18b41630d7f32e4abd431dbc53d49493d92f87ed86ed1b8f6137fe150b00f014753cdf65880bb500c65785168028574d
-
SSDEEP
6144:8prUCaLyZszfHbIPDpyPEqKRhGaJDeAsHrnFnmABtu9n1/TUggV81WjbPJxhqRum:8pjaLyyf7IF4KRh3JbAD6nVw3YWJDGtB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 020d3b769d3c846cb86e321c211cc631
Files
-
020d3b769d3c846cb86e321c211cc631.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ