Static task
static1
Behavioral task
behavioral1
Sample
261bf5abf865899b09132ce68b1cbf32.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
261bf5abf865899b09132ce68b1cbf32.exe
Resource
win10v2004-20231222-en
General
-
Target
261bf5abf865899b09132ce68b1cbf32
-
Size
557KB
-
MD5
261bf5abf865899b09132ce68b1cbf32
-
SHA1
0bd93d4f06774885a1406cb7d2dc41ba9683410b
-
SHA256
c39f211697bbd56c3edf1c1b6c3c18526d558f7db6b330835025d40cb5335c28
-
SHA512
d1b82878d910d06712b2a3639a4a5c6ffd39c8235d5be3e8aff4cd9b0379751dbc9094aa14c3925f357e819bf560f62fffbabd5f49dd8fcfedb05e6047c03ec3
-
SSDEEP
12288:5ojC7zsdh7OlwkyOtvqbgl8DuN36behvBbUUTAYJD9C2km:5174n7OW2kxDuN36yTvJD9im
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 261bf5abf865899b09132ce68b1cbf32
Files
-
261bf5abf865899b09132ce68b1cbf32.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 780B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE