Static task
static1
Behavioral task
behavioral1
Sample
209beffe74d6857e9b2f0d99ad2c2830.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
209beffe74d6857e9b2f0d99ad2c2830.exe
Resource
win10v2004-20231215-en
General
-
Target
209beffe74d6857e9b2f0d99ad2c2830
-
Size
69KB
-
MD5
209beffe74d6857e9b2f0d99ad2c2830
-
SHA1
4b8696debae70ae03b361654d32e39745e10d24a
-
SHA256
d115ee87ddbb066a1925e06e5ed84db62018873b6af6004f1445db01608c00be
-
SHA512
5f928a690b028e0cdd17ff2ebc984498619fe620357faab0f48274fced172e731242f6a02dc060f8b55eb744267b7620cc231a60f363cb803a3f16ead32c7aa9
-
SSDEEP
1536:mn/LSDKE6bPv/BJ7YzOra3RCnYrfjM12LO3vNi/:EDk4D7YSZYYY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 209beffe74d6857e9b2f0d99ad2c2830
Files
-
209beffe74d6857e9b2f0d99ad2c2830.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.code Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE