Static task
static1
Behavioral task
behavioral1
Sample
a118e2e8f3c9ce2008917d096c11f81d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a118e2e8f3c9ce2008917d096c11f81d.exe
Resource
win10v2004-20240221-en
General
-
Target
a118e2e8f3c9ce2008917d096c11f81d
-
Size
385KB
-
MD5
a118e2e8f3c9ce2008917d096c11f81d
-
SHA1
98e03781381534e20fcb94a4be7c0b1733e2a998
-
SHA256
b9d2432e4ff7c99e205adf8888a55ec07c836031132bae6286e0cec02483d44c
-
SHA512
4dcd53d36f253cfb100f09c226028cbb86b8c7b4f064a33c6ee26c564b7a9bafa1187b39cf82d7d54e6720b8e2c07c3a9d5ed1fcf2ba9ad6e5a4f206462d021d
-
SSDEEP
6144:3WHic/wxSxRHCVVoit6XfzoFfW7N3K3Km8KoOW3CFEnQWn5LNVBB:3Ii/wPHG6feu7NWKiWyFUDVBB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a118e2e8f3c9ce2008917d096c11f81d
Files
-
a118e2e8f3c9ce2008917d096c11f81d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ