Static task
static1
Behavioral task
behavioral1
Sample
20d1c99ee6b44e5711d0521a9747662a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
20d1c99ee6b44e5711d0521a9747662a.exe
Resource
win10v2004-20231222-en
General
-
Target
20d1c99ee6b44e5711d0521a9747662a
-
Size
104KB
-
MD5
20d1c99ee6b44e5711d0521a9747662a
-
SHA1
db8ea2acabc7b1fd6d5b40085a929f3db584c547
-
SHA256
4691d30ba59dffbff2f2672581eb74b8b74acfce6a033476e3be88903ad07a9b
-
SHA512
75dc7c5670e1490ca744de97043fb93ad64d35fa3289e5855a4f2c6d32d800e5abcf08cca964d069b9d3b0af1f631c94d1b6e118ebb4ed83795d84795c0f0fb4
-
SSDEEP
3072:f+2MuNvVJGwk9TITj2534sF6DKMXWJByyZ:NhHaT+j25IS6DjW/Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20d1c99ee6b44e5711d0521a9747662a
Files
-
20d1c99ee6b44e5711d0521a9747662a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
ni Size: - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hbev Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 948B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE