Static task
static1
Behavioral task
behavioral1
Sample
207641f6e11a5d55053ae2f80b1b706d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
207641f6e11a5d55053ae2f80b1b706d.exe
Resource
win10v2004-20231215-en
General
-
Target
207641f6e11a5d55053ae2f80b1b706d
-
Size
146KB
-
MD5
207641f6e11a5d55053ae2f80b1b706d
-
SHA1
39db962fca710e4747d0d54ebe77d4be15ddbc0c
-
SHA256
1c8e6b043ca6779ee4687eb8ba1c3670ee02fa066e63862dd3b28c1888e3910f
-
SHA512
e4f1d1c117995b18b66d73fca66af04d4bedba60202b98c3da7235fa1e0a75154db43e52d1241d036ead2873c150ed4136ae88d3ac9fede77e7b944a08fd7b49
-
SSDEEP
3072:tXNoO2ve52+TxPCdoFR30jO2gaRH+g+V1MG+QtFmQDMLpZzLq9DibfWo4PLR1Z:gho2yBL92N022bwfK42x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 207641f6e11a5d55053ae2f80b1b706d
Files
-
207641f6e11a5d55053ae2f80b1b706d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
rk8 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
efajs Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2xzch Size: 4KB - Virtual size: 842B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE