Static task
static1
Behavioral task
behavioral1
Sample
117b9f6e3c7bb38052144ef06e0b1edb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
117b9f6e3c7bb38052144ef06e0b1edb.exe
Resource
win10v2004-20231215-en
General
-
Target
117b9f6e3c7bb38052144ef06e0b1edb
-
Size
1.9MB
-
MD5
117b9f6e3c7bb38052144ef06e0b1edb
-
SHA1
05f244ad5b3c0fcc92d7070605992b890d28c3e5
-
SHA256
39e664207b7e69d03eaeb3a1684e45f1c7c12f57dc6c8bc86e527bf2d3333752
-
SHA512
6b652c5c8d5111a16f88c19ca16887d5f61c66fd2804d5221316922d05812f549f71fa7dbe50121b41a4e7f1a8e5badfd5800a2fe562f2398be7576bece32fc3
-
SSDEEP
49152:phMxNrJ/GMUjbp7bjsQfkpWJHxIfwOt2oENbjO0:pe79Gn/VZ8wX0wOGNfO0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 117b9f6e3c7bb38052144ef06e0b1edb
Files
-
117b9f6e3c7bb38052144ef06e0b1edb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.khe Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE