Static task
static1
Behavioral task
behavioral1
Sample
022d27966ee7a09c6d24594c7934690f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
022d27966ee7a09c6d24594c7934690f.exe
Resource
win10v2004-20231215-en
General
-
Target
022d27966ee7a09c6d24594c7934690f
-
Size
126KB
-
MD5
022d27966ee7a09c6d24594c7934690f
-
SHA1
c2e5e90058b479397dafdb917ec7c76e25d13306
-
SHA256
89ba0877d7deee09078a799f1f6633ae412fd6c2cafd0298200676aac3b9a2a5
-
SHA512
61e03d5c9d775ecc646bf0c74ad4ced3b7127194fb4c9d9f5c656561ddf728598ca9c2daef78956eb84172cb25457896bf86da57158127daac95463332e996d7
-
SSDEEP
3072:3zihH7UQEKgq0OGu6xoPt6o1eRWBFkxFFAMBN9DgqsFubjSA:DOHmKgqJG8wn5VN9Dgqs4jSA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 022d27966ee7a09c6d24594c7934690f
Files
-
022d27966ee7a09c6d24594c7934690f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
408ir0 Size: - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
408ir1 Size: 126KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
408ir2 Size: 395B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE