Static task
static1
Behavioral task
behavioral1
Sample
23cb1ac48faf5ee2c80b5ff5be3f6b80.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
23cb1ac48faf5ee2c80b5ff5be3f6b80.exe
Resource
win10v2004-20231215-en
General
-
Target
23cb1ac48faf5ee2c80b5ff5be3f6b80
-
Size
280KB
-
MD5
23cb1ac48faf5ee2c80b5ff5be3f6b80
-
SHA1
d33f7ff5de1e3eedc8429662f743d9729a3bdf3d
-
SHA256
24580071ea39ebde67c5ff8c2de3b166964fffed1e3d2964b1f1bee15958f7c1
-
SHA512
3c8f61f364baa16f1523923658687f2bc849a11adab3bc842d5a5cbfa3b85436101ce1acb04b0fecb566b44baccccad07b31a56c867727cb503ad445b2cd3080
-
SSDEEP
6144:O1r6BS2xilKYPLeGdct/XZh3LL1LnKHOJRi7WopE0x3+:82khlKYDeGdivZh3n1jyOiTKE+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/23cb1ac48faf5ee2c80b5ff5be3f6b80
Files
-
23cb1ac48faf5ee2c80b5ff5be3f6b80.xz
-
23cb1ac48faf5ee2c80b5ff5be3f6b80.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 411KB - Virtual size: 410KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 256KB - Virtual size: 255KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ