Static task
static1
Behavioral task
behavioral1
Sample
2997363196b6a0f6a06646ccc81d8ebd.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2997363196b6a0f6a06646ccc81d8ebd.exe
Resource
win10v2004-20231215-en
General
-
Target
2997363196b6a0f6a06646ccc81d8ebd
-
Size
965KB
-
MD5
2997363196b6a0f6a06646ccc81d8ebd
-
SHA1
9dc02075a25124d5d3d2e210cf44fb3c72acadf2
-
SHA256
58ed49b76f53911e456ba3962f31c6a0423b927707819d46e611275ae5e336dc
-
SHA512
330057143986c989ff445d0a8089758733afac6c7dbd7500c4234c635eab7525ce336c52650a52d5137bd904bac50e04e41ea5b1e6a019863a8e06a1f46f1355
-
SSDEEP
24576:lgYVFIY/TAKLw0JhWQXnpbsW9orsq4M1crDLYx/1gviRxtM5:W2IQXfJhWQ5AWh3M1crQ/13R8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2997363196b6a0f6a06646ccc81d8ebd
Files
-
2997363196b6a0f6a06646ccc81d8ebd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.78Pk Size: 863KB - Virtual size: 920KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.78Pk Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.78Pk Size: 4KB - Virtual size: 908KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.78Pk Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.78Pk Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE