Static task
static1
Behavioral task
behavioral1
Sample
674d390ab8b670ee3f320bc2e6523b8e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
674d390ab8b670ee3f320bc2e6523b8e.exe
Resource
win10v2004-20231222-en
General
-
Target
674d390ab8b670ee3f320bc2e6523b8e
-
Size
504KB
-
MD5
674d390ab8b670ee3f320bc2e6523b8e
-
SHA1
deae57f5460430981b28f91966f92e3fbac0bbd5
-
SHA256
a9c82a097a3510a9f3abb53017e1b3b0bf9c42ee8bec71b3f77d50f5da4e242a
-
SHA512
46b932ab07eeb4e2d709015ab32b2a639e9657819fad15f0211c648b1b369bcf387e247bc1d130148e0aa5d1bc1c82670548c24b42d84b71b20b0e2884b6c90b
-
SSDEEP
12288:GwWFjmFUgYGa7U5xf6EMiBW4APbEQu4H2r7qHc1TTfGxnlP1ks+Zd:GwK+YGaGxL76bEQgSH+TqnlP1aZd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 674d390ab8b670ee3f320bc2e6523b8e
Files
-
674d390ab8b670ee3f320bc2e6523b8e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.l80azp Size: 804B - Virtual size: 644KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rif87p Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.r3atb$ Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ttxk4d Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wikldr Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.q9wm1y Size: - Virtual size: 35B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.0$01p9 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.$fowhp Size: - Virtual size: 99B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 498KB - Virtual size: 500KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 64B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE