Static task
static1
Behavioral task
behavioral1
Sample
sample.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
sample.exe
Resource
win10v2004-20231215-en
General
-
Target
f26f0e4c8158154c0495eeb1885f706e573eb8ac101ed7d70c70f5823c30bb3e.bin.sample.gz
-
Size
74KB
-
MD5
0c6a35bdd82549038a11c0ec8bdbfc7b
-
SHA1
c4b34a001c3f293d606ac857c1559776aac860a5
-
SHA256
846971954e59f06ed1dffc6f977960f0448699bfca7a6988ac235e337529bb76
-
SHA512
beebd284dabdb95cf3ee6bbacdeea435d31601f254604ade77969f5fe33e160e46188bb013874ef9019342f54bcdbfc8ed823acaa8bc04ef6412d9a927929703
-
SSDEEP
1536:JTzwV/LvcPfiDQuhoPr1BpqOWZGAnjg7muuRrGYH219:hzw5zcPaEuiPrVxWZGAjiSCYG9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/sample
Files
-
f26f0e4c8158154c0495eeb1885f706e573eb8ac101ed7d70c70f5823c30bb3e.bin.sample.gz.gz
-
sample.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ