Static task
static1
Behavioral task
behavioral1
Sample
253e9fd7972fc26edba8fbe5b4f48893.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
253e9fd7972fc26edba8fbe5b4f48893.exe
Resource
win10v2004-20231215-en
General
-
Target
253e9fd7972fc26edba8fbe5b4f48893
-
Size
82KB
-
MD5
253e9fd7972fc26edba8fbe5b4f48893
-
SHA1
bac8e43d3a4bdb3983070e553424f64b64549182
-
SHA256
b1c8ed4adf3db723520e02e62366b9bf43b79abb8ae6683bf5de35aaaab50dad
-
SHA512
e19e2e8e40dd192964dcbcad9a9b5907d86a3ccba2ced369c3a7e8ac4fd24d1287d81a4c81306069d624e3b9e151b2d94d74146a23fae49f39046f8d0ad34e2b
-
SSDEEP
1536:hJuXTjBoEXbzDDg2Y3zBNDeNnp7BZGyg3gYvazJkleGJiTVwsNfXJBrAC:hJ+Xu2YDKNnp7B0yPmleGJiTZJB5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 253e9fd7972fc26edba8fbe5b4f48893
Files
-
253e9fd7972fc26edba8fbe5b4f48893.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 90KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ