Static task
static1
Behavioral task
behavioral1
Sample
17a345049c8a61364b27209f6319a6c2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
17a345049c8a61364b27209f6319a6c2.exe
Resource
win10v2004-20231215-en
General
-
Target
17a345049c8a61364b27209f6319a6c2
-
Size
1024KB
-
MD5
17a345049c8a61364b27209f6319a6c2
-
SHA1
06b83a74fef62dd522cd9b558d8da8b14e9d5b22
-
SHA256
968b93dbb01b23099aba5b1660b0a5080995e2bf455977b940b0c60411df6b7d
-
SHA512
8f01f7d9f09e710caa0f090dca6d1050f6bd1c68a997974916a7cfd1a0c4279043990c4f60814569683d6dc5b27abed0e710a3b369da5967044cb9680c1219ab
-
SSDEEP
24576:RIgw0zitp6YZ4d/Aaz9baDz7TAk98+KCkQMqFMd/6ny2O:RIXuApFZ4d/x9bkz7ck98PCkQMq2d/6E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17a345049c8a61364b27209f6319a6c2
Files
-
17a345049c8a61364b27209f6319a6c2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 281B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE