Static task
static1
Behavioral task
behavioral1
Sample
a1b2b2498fe8af02ed2d2a7c59761b76.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a1b2b2498fe8af02ed2d2a7c59761b76.exe
Resource
win10v2004-20240221-en
General
-
Target
a1b2b2498fe8af02ed2d2a7c59761b76
-
Size
323KB
-
MD5
a1b2b2498fe8af02ed2d2a7c59761b76
-
SHA1
faa12e010895cda8e3ca9a22cdc776037b845b48
-
SHA256
684f6784bf308cd1a0cd0beaecf85c8cf64b127827c53640cbe7d1068f71043f
-
SHA512
7563d11a331a264709bec236b2f81d4d3a1d7bee5707f3b1d003399c22d5c1bf0665471e6d8dad25dce12f6d4a696c0f9cf9e89c5ce2c2171625ee552e763cf7
-
SSDEEP
6144:ZF2idZecnl20lHRxp3gqpiaX+FR6Qcgj1qA5T9dYsUIQ:TF3Z4mxxyi+FcvgjvVbYsUF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1b2b2498fe8af02ed2d2a7c59761b76
Files
-
a1b2b2498fe8af02ed2d2a7c59761b76.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 312KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE