Static task
static1
Behavioral task
behavioral1
Sample
c1188adfbea1080b2e40b509ce07a090.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c1188adfbea1080b2e40b509ce07a090.exe
Resource
win10v2004-20240226-en
General
-
Target
c1188adfbea1080b2e40b509ce07a090
-
Size
679KB
-
MD5
c1188adfbea1080b2e40b509ce07a090
-
SHA1
09c58260352405f690436660ac60cc25a16a7a57
-
SHA256
08f8cba47ba98326df3eef1353748047bf0b33f5ac2d94357589582c35c65002
-
SHA512
fba2e51f7eef8dba28dcc7ca3ee9262ef729df6993bb688c32588d70daa3523a687d75543a731b9651ad1a912594cebbd464c5f32c49113fa1fa0c8e5eaefd69
-
SSDEEP
12288:U6ufS0uPbKNbVBzF3tUiB8nGVwniVLeqOgNtTird3fu8:AJNbV3tUGRgihTEd3fu8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1188adfbea1080b2e40b509ce07a090
Files
-
c1188adfbea1080b2e40b509ce07a090.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 185KB - Virtual size: 434KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 33KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 21KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 896KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pysky Size: 331KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaskPE Size: 1024B - Virtual size: 713B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaskPE Size: 1024B - Virtual size: 744B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.shield Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE