Static task
static1
Behavioral task
behavioral1
Sample
a239be57fd3ea173cb942f0fc6962901.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a239be57fd3ea173cb942f0fc6962901.exe
Resource
win10v2004-20240221-en
General
-
Target
a239be57fd3ea173cb942f0fc6962901
-
Size
355KB
-
MD5
a239be57fd3ea173cb942f0fc6962901
-
SHA1
8b66da72a6bee38b0270e09011418d96128a305c
-
SHA256
637a7a01786bfa5a6297fd00d7bccf64a6fc6a12e99b5fcbcc34f3cf69b66f8d
-
SHA512
6c0cd928c3bc5f43e57842e91f5b133420e2ac05e8c51a7c2026c67d836721d82191ceb286015586202b2e1df7d5f1cb507ee3ce772d064cdd76f9049b4139d0
-
SSDEEP
6144:+Y400b2DUdwIsa7eIt/wf1cNwPLvoqg0R2VhPefm0To63vUmyGj0gWtxdV7HMyLE:e00XsGNw1c2obY7QTGjFWtxTzMyLvjI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a239be57fd3ea173cb942f0fc6962901
Files
-
a239be57fd3ea173cb942f0fc6962901.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 91KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 262KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE