Static task
static1
Behavioral task
behavioral1
Sample
401f65a6c1685e4e6e5163c5296255fe.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
401f65a6c1685e4e6e5163c5296255fe.exe
Resource
win10v2004-20231222-en
General
-
Target
401f65a6c1685e4e6e5163c5296255fe
-
Size
534KB
-
MD5
401f65a6c1685e4e6e5163c5296255fe
-
SHA1
3c647f0f1165e407354f0fc7f5b7d1560974c95e
-
SHA256
1144e400423cf25c3fda21175a39a67ba9849e4a931cfa84510d68f4980ade32
-
SHA512
8967a0c69a5dab0e6854a9eceaa67465efaf4a898d55c0c6e936cb4c7095a33a4ffb141c0dc14546e71a46a8ba203e3e07a96f11e4f09b915bb9e2177750b184
-
SSDEEP
12288:B1YdAHum8jvV2PS0VS5cd4nLamDOdC10eEj1ifAxJxN7/FD:B1YNmY8bA5WODOQaeEjMMxDD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 401f65a6c1685e4e6e5163c5296255fe
Files
-
401f65a6c1685e4e6e5163c5296255fe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 30KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
upx Size: 497KB - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE