Static task
static1
Behavioral task
behavioral1
Sample
246d34e27572e85573e31d797b7b08025c8c594641e9f983c61407ca6928acba.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
246d34e27572e85573e31d797b7b08025c8c594641e9f983c61407ca6928acba.exe
Resource
win10v2004-20231215-en
General
-
Target
246d34e27572e85573e31d797b7b08025c8c594641e9f983c61407ca6928acba
-
Size
52KB
-
MD5
e5ca3b1c27db22e995c2c8fc8c7b2e6e
-
SHA1
fa8743d59c0b24fbf0525da9667b4bc1e73f5b72
-
SHA256
246d34e27572e85573e31d797b7b08025c8c594641e9f983c61407ca6928acba
-
SHA512
8aee4d76f83b0d6f86a320cf2fba2266d66fe4d5fbc366b84fcf414fce1027dd04d42cfa2dc974105592d5913f349596af0e4e6bbde8d8e8a1c851f833a9121d
-
SSDEEP
768:FBC73bCaUd1jvv1AwIhcEmSZVGcHPVAHZ/eYHn/1H5F/sn0MABvKWe:FMz/ink7L9CH75o0MAdKZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 246d34e27572e85573e31d797b7b08025c8c594641e9f983c61407ca6928acba
Files
-
246d34e27572e85573e31d797b7b08025c8c594641e9f983c61407ca6928acba.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ