Static task
static1
Behavioral task
behavioral1
Sample
20b71e1d300e87c809c71a239fd6ac09.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
20b71e1d300e87c809c71a239fd6ac09.exe
Resource
win10v2004-20231215-en
General
-
Target
20b71e1d300e87c809c71a239fd6ac09
-
Size
235KB
-
MD5
20b71e1d300e87c809c71a239fd6ac09
-
SHA1
482728485bccbd35c8b1c8fe4b21a826b28e8903
-
SHA256
497f7bbce5a76cc2f79b7792e8d47113bda193ee3de0c41358b05ba5d45d2b2d
-
SHA512
a7f2806bc67e38161029862532d24c8de835e6825681425c657557d4dba71e7c425d8e0946f6cf6915c86d54ad3ad8ab946300117aae8ca2bd54c83ab9d4f46b
-
SSDEEP
6144:i8FWrUrb1ESVtkUfgEZx7IphnqocAivpmU0vYz:UUrb1ESVtTfHbsqnbvpx0vYz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20b71e1d300e87c809c71a239fd6ac09
Files
-
20b71e1d300e87c809c71a239fd6ac09.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 102KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 31KB - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE