Static task
static1
Behavioral task
behavioral1
Sample
290361f4109c12cce762471f6f5e3ca7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
290361f4109c12cce762471f6f5e3ca7.exe
Resource
win10v2004-20231215-en
General
-
Target
290361f4109c12cce762471f6f5e3ca7
-
Size
429KB
-
MD5
290361f4109c12cce762471f6f5e3ca7
-
SHA1
57dee8d3e27886afe02ada0bfaf8271b987f2d0c
-
SHA256
b24c55c520a457bc2526663c15f0c013e8aa3971069bb87dc54b18b952b68f5d
-
SHA512
5509a0686f24e21bfc744f84ad823018ba707487841adc0e6e0429a3170279bd0fffe2b411d02ffe6e0d5c279a467df0135da533e5828c097179806762e93c3a
-
SSDEEP
12288:/wWFR5MoqTA+/VG3wRUpIRembDdjemnjr:/wKXSTAEVG3wcB89njr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 290361f4109c12cce762471f6f5e3ca7
Files
-
290361f4109c12cce762471f6f5e3ca7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.b2nyx$ Size: 673B - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.z4911s Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.a1rga6 Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.4$j1wf Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.275bbv Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.j0mo4k Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tiu4c1 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 586KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.7awh2v Size: - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cf8q9k Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 422KB - Virtual size: 424KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 48B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE