Static task
static1
Behavioral task
behavioral1
Sample
022abf67c22dffa3258ce28cde3f3468.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
022abf67c22dffa3258ce28cde3f3468.exe
Resource
win10v2004-20231215-en
General
-
Target
022abf67c22dffa3258ce28cde3f3468
-
Size
693KB
-
MD5
022abf67c22dffa3258ce28cde3f3468
-
SHA1
a340e4901f5424a161088b7ecc2947ea486f5872
-
SHA256
d710b0395310973ed925ad4b6d13f067eba65c35dee31e4abe7a663a1b2a3acc
-
SHA512
8f95668341ab0bfbf46b40ac1942595eca78a3ef21cc71f5d02ec8d7c62b6791cd48016e92cf3dc1f835e2b06a8681be40d544d925e92b8aab48fd224e94846f
-
SSDEEP
12288:uVsiC71k/2QLLV5HTJ/G9pQry5vGSQuTyaXdDgYN/F3Z4mxxReXKi+YLVZ:u2i8k/2MLPHTJ/Gsry5OfubXlx/QmXR+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 022abf67c22dffa3258ce28cde3f3468
Files
-
022abf67c22dffa3258ce28cde3f3468.exe .wsf windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 377KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE