Static task
static1
Behavioral task
behavioral1
Sample
0100e2964cf74c2c98315b6803b701cc65e788ffb13785d0e46c90bfd51078c6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0100e2964cf74c2c98315b6803b701cc65e788ffb13785d0e46c90bfd51078c6.exe
Resource
win10v2004-20231222-en
General
-
Target
0100e2964cf74c2c98315b6803b701cc65e788ffb13785d0e46c90bfd51078c6
-
Size
3.5MB
-
MD5
84833217130e2d236bbaec3757c2c4c4
-
SHA1
6889ac80564d0f0e97cb147df83ab82512edba2f
-
SHA256
0100e2964cf74c2c98315b6803b701cc65e788ffb13785d0e46c90bfd51078c6
-
SHA512
6803462522448aeafea9e7173622977726dd594bc197f11d8c5fdf02e013b9fcf4bd0649debfb448bc48698353cf99d975afe59fd439b720406546dcaa2885be
-
SSDEEP
98304:idxzuClwXulczwc51n4tP9JG2JE8rtYbcFA5:iruClsjsP9JK8rAcK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0100e2964cf74c2c98315b6803b701cc65e788ffb13785d0e46c90bfd51078c6
Files
-
0100e2964cf74c2c98315b6803b701cc65e788ffb13785d0e46c90bfd51078c6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE