Static task
static1
Behavioral task
behavioral1
Sample
117efed815a60266968dd55bffeecd1a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
117efed815a60266968dd55bffeecd1a.exe
Resource
win10v2004-20231215-en
General
-
Target
117efed815a60266968dd55bffeecd1a
-
Size
1.6MB
-
MD5
117efed815a60266968dd55bffeecd1a
-
SHA1
5d96ba7957ae221a88f5ef62300fc53d7c936664
-
SHA256
3aa59cc90d4d46ed17975b28b799948733f505d958f3901d3d3ff1c15282abd6
-
SHA512
bc6f52e1bb7c92542ed7406277be8d77a453db8d0aa0058e34ac96afc8b86f021be026921ff805d1aec605d6a565a4bfe7595a42b867289c8bb2bc9b8317f6d6
-
SSDEEP
24576:pPtSGBmtoCt5Bwz2Y2SPIgCUqRc7XgP9NjIwnhcJhA9UW:pPDEauBwz2Y2SPvC58Kh0KS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 117efed815a60266968dd55bffeecd1a
Files
-
117efed815a60266968dd55bffeecd1a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.avp Size: 727KB - Virtual size: 780KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avp Size: 906KB - Virtual size: 924KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avp Size: 4B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avp Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avp Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE