Static task
static1
Behavioral task
behavioral1
Sample
cffaf5052a53ce88f12a65bcbab7de91d2a9617aeca2995caf20a4c39044e785.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cffaf5052a53ce88f12a65bcbab7de91d2a9617aeca2995caf20a4c39044e785.exe
Resource
win10v2004-20240226-en
General
-
Target
cffaf5052a53ce88f12a65bcbab7de91d2a9617aeca2995caf20a4c39044e785
-
Size
522KB
-
MD5
79f817b72d9d85f5b92f5ac9b41e490f
-
SHA1
6017322a87ef09e0478994a9c477beeb8a642f95
-
SHA256
cffaf5052a53ce88f12a65bcbab7de91d2a9617aeca2995caf20a4c39044e785
-
SHA512
713dad5d80e7513fdffb1f02042399a473e641e5f83817f4c109a738ca15eb5c14ec6d43d1bf0c34c8da005bfb6220edc1577562664fcc2ed40f4ccd6ecb522b
-
SSDEEP
12288:euV7BHVCJvrVieCsp7+G5ac13ly0pqmIlx5mjjRHPAUYA:euZhVCviFsZAcbpcfonFADA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cffaf5052a53ce88f12a65bcbab7de91d2a9617aeca2995caf20a4c39044e785
Files
-
cffaf5052a53ce88f12a65bcbab7de91d2a9617aeca2995caf20a4c39044e785.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ