Static task
static1
Behavioral task
behavioral1
Sample
adfa5dfcd14a95aaf7f68c694cab7dc1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
adfa5dfcd14a95aaf7f68c694cab7dc1.exe
Resource
win10v2004-20240226-en
General
-
Target
adfa5dfcd14a95aaf7f68c694cab7dc1
-
Size
165KB
-
MD5
adfa5dfcd14a95aaf7f68c694cab7dc1
-
SHA1
9dd6641ca044dfbddfd3566b7e55b59496f8f353
-
SHA256
6a0288aaa4ee7c242bf257d46ed507909aeeb98c2cbb8e2c657e55fab2e479c8
-
SHA512
63f4794c83e2209d1a74c9b9c1824e64cf6d4a49f59462db2e5e8ac87a1d1293685f8d59679e6416ae1afcc271796be6d8c027b1d2c0fc060c583346f80e62a8
-
SSDEEP
3072:z+4qV0/VYbXH52Z15gSksjuJzP6kkt4UjwIirqyYaT5hT:zjquObXZ2jxiD6kkqsiLr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adfa5dfcd14a95aaf7f68c694cab7dc1
Files
-
adfa5dfcd14a95aaf7f68c694cab7dc1.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 90KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ