Static task
static1
Behavioral task
behavioral1
Sample
f517389ee6d976e35003a9be72de7b4f1544a36883ee1b3480675db9763e8f4a.exe
Resource
win7-20240215-en
General
-
Target
f517389ee6d976e35003a9be72de7b4f1544a36883ee1b3480675db9763e8f4a
-
Size
2.7MB
-
MD5
d5f2513c1d482e82e9266b87969afd2e
-
SHA1
5e9a6e664744651d7c4ec6cd9a122abb5d272751
-
SHA256
f517389ee6d976e35003a9be72de7b4f1544a36883ee1b3480675db9763e8f4a
-
SHA512
7e0b172d0ca03fd516ea76999b8bd061ec2e84c4f239e4f85261a4cef669a3a46628a296e47594114885853951ba970386b2dd7359c93e2777e4004a4b25662b
-
SSDEEP
49152:/kqQV4PlKqAllllKd1LYguqOxTmRXcObG:OV4PlKqpDYgLsObG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f517389ee6d976e35003a9be72de7b4f1544a36883ee1b3480675db9763e8f4a
Files
-
f517389ee6d976e35003a9be72de7b4f1544a36883ee1b3480675db9763e8f4a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE