Static task
static1
Behavioral task
behavioral1
Sample
885a93643408780ccbc292200df1256d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
885a93643408780ccbc292200df1256d.exe
Resource
win10v2004-20231215-en
General
-
Target
885a93643408780ccbc292200df1256d
-
Size
589KB
-
MD5
885a93643408780ccbc292200df1256d
-
SHA1
3bb9e37e65ed24c9042f7cab198c36d07fef76bd
-
SHA256
e5da6594c450d4826575090fda2c336f5b38940897eeed71e3b7be2218ea036f
-
SHA512
b556c64a761be02aa61f5f10f68f36210f055c62866e14cb42c0c8a92f518c87f7fa23a4672053d67b913176ead3113907bc40b6581cddea1677e1fa64727ead
-
SSDEEP
12288:rVukvVoSu3Ne1nhp7Ju0bvmTzCaThybBiXz2tsBmZHktmW:r4k7My9F+Tufsd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 885a93643408780ccbc292200df1256d
Files
-
885a93643408780ccbc292200df1256d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 937KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 960KB - Virtual size: 959KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didat Size: 4KB - Virtual size: 793B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ