Static task
static1
Behavioral task
behavioral1
Sample
d68984e0c07b4a475c29ab0ff8c60268.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d68984e0c07b4a475c29ab0ff8c60268.exe
Resource
win10v2004-20240226-en
General
-
Target
d68984e0c07b4a475c29ab0ff8c60268
-
Size
2.2MB
-
MD5
d68984e0c07b4a475c29ab0ff8c60268
-
SHA1
ee1208d4cf4b5c359caa6a61b54c7a8b872e79fb
-
SHA256
ed331f40c73dabd637d736681e89e10c2cc28b60287bf05572438a5f03baebe7
-
SHA512
7e74fa6f6755baf5d871124a3c3a681eb5a5e2de7faa9c5cb9d93ed64b941966c5305a02ef1915efd51c2554632ff0e83296341516eb0a5af7940cbc93820f01
-
SSDEEP
49152:doZ3Lp26nWo9itGYH5xOWaLhbkv8SE0hQJZF2IMxJObl2FPYbSawymhJ8nK3:doZ7dB9itGYH5zaNbOE0hQJZmxJObslB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d68984e0c07b4a475c29ab0ff8c60268
Files
-
d68984e0c07b4a475c29ab0ff8c60268.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 397KB - Virtual size: 397KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ