Static task
static1
Behavioral task
behavioral1
Sample
203ca41d94448d94db0bda7db16f1878.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
203ca41d94448d94db0bda7db16f1878.exe
Resource
win10v2004-20231215-en
General
-
Target
203ca41d94448d94db0bda7db16f1878
-
Size
131KB
-
MD5
203ca41d94448d94db0bda7db16f1878
-
SHA1
103f7f1237236a9c38f7464c0db02e7364ed05ff
-
SHA256
d113c53f7593b40f7f4c7e4a31576be957338d1703fdd7b3f54b2fa09a2647bf
-
SHA512
dddb5e1e9a30bf156e14a5475a16493e74e5fd8b5b36124d87aec554cdd5f266a8beb421f9561fcd0a1db566e433ab2f4f44742cd82c06daf6342f2e221973a3
-
SSDEEP
3072:GEqVGmNDoehdeMagJ8U3j3+DX5L5CbmfvRUouqbNqcO:GESfNUeh9aa8UTkkbmfaAJqcO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 203ca41d94448d94db0bda7db16f1878
Files
-
203ca41d94448d94db0bda7db16f1878.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
onzorxiw Size: 1KB - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fjb9 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE