Static task
static1
Behavioral task
behavioral1
Sample
68a18ba31ec6889b82c4c9b2af5e32f6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
68a18ba31ec6889b82c4c9b2af5e32f6.exe
Resource
win10v2004-20231215-en
General
-
Target
68a18ba31ec6889b82c4c9b2af5e32f6
-
Size
512KB
-
MD5
68a18ba31ec6889b82c4c9b2af5e32f6
-
SHA1
c5f6352e959b86bdded95bf6439047533970efef
-
SHA256
2d9a1d9755eedcaa543749fd9b15f27754d96bd6c365725718da337c7fd5640f
-
SHA512
1d07a027a2c142f4f2c921d1dc830534d3d7627c63905ca7f9a9630e536265d8a489e7af6673455e433eccfcea4b3b6597ed0741ae4e4f9194092792ca05ac62
-
SSDEEP
12288:ljwt6536flioEeaz13LLlzCmkBAzbuDxuZ:ljwaqfLjazB30m8GZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68a18ba31ec6889b82c4c9b2af5e32f6
Files
-
68a18ba31ec6889b82c4c9b2af5e32f6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 801KB - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 262B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE