Static task
static1
Behavioral task
behavioral1
Sample
c22ab68aff1de3f1fee4f5129eb5fabb.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c22ab68aff1de3f1fee4f5129eb5fabb.exe
Resource
win10v2004-20240226-en
General
-
Target
c22ab68aff1de3f1fee4f5129eb5fabb
-
Size
105KB
-
MD5
c22ab68aff1de3f1fee4f5129eb5fabb
-
SHA1
17b42451e6eeb822d96c4a320278a04e008971e8
-
SHA256
9daf063dac6faf6cfd2d8d470b5748e857615fed495e1e1176b99639aa0252e2
-
SHA512
bed332c12029ee8e659ddfc1253dac29dfda442f5bd7d79807c032dc9e67321f9fd4ba55d78bf4ba4a22e7b34864dc14760f0eb9216c8e645338041c945b84e7
-
SSDEEP
3072:z+8yuC5eP+WJlOk03B/FcfwwDSoCEcB5m0AOn3MpW9i:C8yuCAWk03RFcYACpz5/8Y4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c22ab68aff1de3f1fee4f5129eb5fabb
Files
-
c22ab68aff1de3f1fee4f5129eb5fabb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 91KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ