Static task
static1
Behavioral task
behavioral1
Sample
17cf3e94cbe10b3cfa1fe3b762a80ec7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
17cf3e94cbe10b3cfa1fe3b762a80ec7.exe
Resource
win10v2004-20231215-en
General
-
Target
17cf3e94cbe10b3cfa1fe3b762a80ec7
-
Size
332KB
-
MD5
17cf3e94cbe10b3cfa1fe3b762a80ec7
-
SHA1
c0c44754d935d8a35c0ef6994ec306f3192325bf
-
SHA256
247c3f031dbf850c52f54bf7072e38c8626103beb9078775f29e4bd77e375532
-
SHA512
c7349440d4d847d7b31a4704f31af6637e26f08e74deb81c9eeb60097da7ef1806fa9c17fc36b3a71b8833edc774dcb870eb081fab78587d34fcfbba43662c36
-
SSDEEP
6144:C2g2shgWVrQDIRjisQeSdZhz2l/gTdx5BC3j0dXw:CWshgWVCWjkeYjz2lIO2w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17cf3e94cbe10b3cfa1fe3b762a80ec7
Files
-
17cf3e94cbe10b3cfa1fe3b762a80ec7.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rol Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE