Static task
static1
Behavioral task
behavioral1
Sample
297db83661db5c4c554355aa6e87bbf1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
297db83661db5c4c554355aa6e87bbf1.exe
Resource
win10v2004-20231215-en
General
-
Target
297db83661db5c4c554355aa6e87bbf1
-
Size
128KB
-
MD5
297db83661db5c4c554355aa6e87bbf1
-
SHA1
1ab6b9015de289f92359c9d83ed47934fd373cd4
-
SHA256
3cb93df046f852a49a12ab7517702c7b8edca49c751f74e860e6b60e4a42ef5e
-
SHA512
2d62e75f7c6b5d0bc6ce422fd1fb2943b4b2f7128e730487b4bfa627f49e6ecd5025a01f8ba1a5ab3b3d1239a56c1a5db3ced997ee40a5c95cb7b21f45ac5901
-
SSDEEP
3072:tU6iZVpydOlPuh9MNvEjFHjBPXb+OepXnOD+mnnIX3ydOlPu7:tU6e4OlGhuOjVtr+VOaAn/OlG7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 297db83661db5c4c554355aa6e87bbf1
Files
-
297db83661db5c4c554355aa6e87bbf1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
8 Size: - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
onyron7 Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4x29lz Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE