Static task
static1
Behavioral task
behavioral1
Sample
24b92f6ffe6b1cbeebe73ff8de2b3555ec31d8066f49c8fc92d7d4b655043bc3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
24b92f6ffe6b1cbeebe73ff8de2b3555ec31d8066f49c8fc92d7d4b655043bc3.exe
Resource
win10-20231220-en
General
-
Target
24b92f6ffe6b1cbeebe73ff8de2b3555ec31d8066f49c8fc92d7d4b655043bc3
-
Size
7.5MB
-
MD5
90005dcc41795864ad07420c8cb5b8b1
-
SHA1
25c78a1bd1458adefce4fb2329f53c72d6d09993
-
SHA256
24b92f6ffe6b1cbeebe73ff8de2b3555ec31d8066f49c8fc92d7d4b655043bc3
-
SHA512
cdc9e7db4b754b1fe9c9ec4f01c081a32ce29ab0f14a58aa60d6f8be89b7f172a1033350665bc189d31fa57a8f12ef6410698fb86f0a428a55a99e37d8cc3ed8
-
SSDEEP
98304:IjoIH4sAow8a4uNR05/49LtZNzFzAArmHuLWqvFaETrArP1dS2XjQKEwjqsl:eo0lw8a+gttZNzFEArm2vF1v4XjQG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24b92f6ffe6b1cbeebe73ff8de2b3555ec31d8066f49c8fc92d7d4b655043bc3
Files
-
24b92f6ffe6b1cbeebe73ff8de2b3555ec31d8066f49c8fc92d7d4b655043bc3.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ