Static task
static1
Behavioral task
behavioral1
Sample
20ec6eb479ce5033b2bb496319a125c19d76a43a547624cf140daa1470f1800d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
20ec6eb479ce5033b2bb496319a125c19d76a43a547624cf140daa1470f1800d.exe
Resource
win10v2004-20240221-en
General
-
Target
20ec6eb479ce5033b2bb496319a125c19d76a43a547624cf140daa1470f1800d
-
Size
251KB
-
MD5
90fea2f5833c468575d5369841869659
-
SHA1
408b2c321d3673018860ddc03488257d27e04908
-
SHA256
20ec6eb479ce5033b2bb496319a125c19d76a43a547624cf140daa1470f1800d
-
SHA512
4c9c998236ca1490171c9b3e697e52f52165c286716b3d19e0ba1250dba44dc741f0e78509a1831d40122c0de978b03943bcc68b1e764a9df6ad64997b44f0f4
-
SSDEEP
6144:2fyVfjmNHgiC4bXqsTk90qC1AOb7eswf1Px++fD8PJ:2fM7+AitXqsTkiR7twRx+gD8PJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20ec6eb479ce5033b2bb496319a125c19d76a43a547624cf140daa1470f1800d
Files
-
20ec6eb479ce5033b2bb496319a125c19d76a43a547624cf140daa1470f1800d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE