Static task
static1
Behavioral task
behavioral1
Sample
17fb9a36b13025705bf5c3925a1b0a65.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
17fb9a36b13025705bf5c3925a1b0a65.exe
Resource
win10v2004-20231215-en
General
-
Target
17fb9a36b13025705bf5c3925a1b0a65
-
Size
214KB
-
MD5
17fb9a36b13025705bf5c3925a1b0a65
-
SHA1
6a587d4a00591fe0e3a9aed0e5fe645ec5e8265e
-
SHA256
29c5b6a47ef30fb67f727f7c76dc0ca4409eb467919d8e0930f6a3cbed06dbfd
-
SHA512
810bbf40b77075d44d3a93900f7d392f457a95dc52e8202c064d84adb18cc6e3d63098ea61fe85e76339d0daf3ba65dfa926b50a4f5c44ad49df965ff6b2f2f4
-
SSDEEP
6144:w4CZxhk1wvqXRsc5Zn8+F2EFgM3qzUiikslpsj+:8hkLh5tLKMeUiylpsj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17fb9a36b13025705bf5c3925a1b0a65
Files
-
17fb9a36b13025705bf5c3925a1b0a65.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE