Static task
static1
Behavioral task
behavioral1
Sample
677a9152f2fdf39bb2857d3ee3cbd63c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
677a9152f2fdf39bb2857d3ee3cbd63c.exe
Resource
win10v2004-20231215-en
General
-
Target
677a9152f2fdf39bb2857d3ee3cbd63c
-
Size
147KB
-
MD5
677a9152f2fdf39bb2857d3ee3cbd63c
-
SHA1
167fa54b0074c87be3fe3b00e6f5147562c9f615
-
SHA256
429e0af4fc20934b595022c1ed66e52d5024ceaf85d49cdf89bdf3fcc5566795
-
SHA512
6918f48239c6fbefff82680eb187eb9ccd2a0cf88980909acdfd01de1a9d3477b53a46686de1f1ff0ad59fbbf854254ae9d319afc902032e3c3ebeab9453f9e8
-
SSDEEP
3072:NXLGlT9TKmwBwLy+dFJ7NW4MEi713j1E496q0GLYXkKYMjpVV:lClT9TwL8b7NW4Mn7kXGLYQMV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 677a9152f2fdf39bb2857d3ee3cbd63c
Files
-
677a9152f2fdf39bb2857d3ee3cbd63c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.WZVIP0 Size: - Virtual size: 798KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WZVIP1 Size: 944KB - Virtual size: 943KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ