Static task
static1
Behavioral task
behavioral1
Sample
ffa40463814505e634702efbcaece393b419b05b3fb7701166a0421eb76af415.exe
Resource
win7-20240221-en
General
-
Target
ffa40463814505e634702efbcaece393b419b05b3fb7701166a0421eb76af415.exe
-
Size
1.1MB
-
MD5
7d0c94a0dafc3fb9a3573a6366f7e957
-
SHA1
10fce6aa77b270fff18d193a7016aa1b3eebe16f
-
SHA256
ffa40463814505e634702efbcaece393b419b05b3fb7701166a0421eb76af415
-
SHA512
3fc78fb60222298e5723f8eb9f83c7888dcb21c5fdf73972ccc7b4b7ff0664ec4e324737f210633634a4c2f70894a4a8f63f4a8fc8e92d58a7c781d43d9fb5bf
-
SSDEEP
24576:b644BNuMbtCIG5FeXb+oaxlAstzwQ+iyIakELysIGn8txOB:24WNuMbtC55FmX2lRzlbL8ysV+x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffa40463814505e634702efbcaece393b419b05b3fb7701166a0421eb76af415.exe
Files
-
ffa40463814505e634702efbcaece393b419b05b3fb7701166a0421eb76af415.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 459KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 71KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 630KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE