Static task
static1
Behavioral task
behavioral1
Sample
172eec8ddcc960fbc160a614c676575d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
172eec8ddcc960fbc160a614c676575d.exe
Resource
win10v2004-20231222-en
General
-
Target
172eec8ddcc960fbc160a614c676575d
-
Size
782KB
-
MD5
172eec8ddcc960fbc160a614c676575d
-
SHA1
031f2b9cc43b715db0c18a74590c88821017fc6a
-
SHA256
61c4df1a95b08848633a73c4fe7b1ccb0c6aeb8d3e6b1c352cd55403c4399ac9
-
SHA512
2d0916d6cd359cf4377d5b1536763add167fbdca4be10ec20fdcee5a5eae968f8f03584d345e9ea971665be85d87a1a9f3ac06eae2117921433c3ed6f03a9a95
-
SSDEEP
6144:UZfec9EbXDk6Rk8KvGFrQZb++tdsHP4+QfI6UVE2Ernmy+g4VrG1VVE+I9e/OrGZ:UZWtI6RkNerQZb+md4w1UArKuhyut
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 172eec8ddcc960fbc160a614c676575d
Files
-
172eec8ddcc960fbc160a614c676575d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ