Static task
static1
Behavioral task
behavioral1
Sample
7306844606e9e59e5cbc0cc5ec113146.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7306844606e9e59e5cbc0cc5ec113146.exe
Resource
win10v2004-20231215-en
General
-
Target
7306844606e9e59e5cbc0cc5ec113146
-
Size
441KB
-
MD5
7306844606e9e59e5cbc0cc5ec113146
-
SHA1
596648629fbd812e731c0c25955165877e00bb5f
-
SHA256
8f73bc9511aafb5598b081ae3faf4716d5942f5a033735e6cb1dbfbdf327b9fc
-
SHA512
620d1f6749a1cd1ace54d8a29403a7aad633edb4274fb2366caaa3d0d265b3cc882e53bbae56e657d2ca291bfc5185fd36327e633c6a80088fca460ee3c6dd21
-
SSDEEP
12288:Wnq5niXoISGnCv7ADvRHtsPofbBAPSamcdmBlz54Cw:b5icTADZ0oz+6aLmr54Cw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7306844606e9e59e5cbc0cc5ec113146
Files
-
7306844606e9e59e5cbc0cc5ec113146.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
FSX0 Size: - Virtual size: 360KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FSX1 Size: 230KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE