Static task
static1
Behavioral task
behavioral1
Sample
350b8cb029bab17df0aed6e52dc28499392a531d80f57088571e786e52fa37c7.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
350b8cb029bab17df0aed6e52dc28499392a531d80f57088571e786e52fa37c7.exe
Resource
win10v2004-20240226-en
General
-
Target
350b8cb029bab17df0aed6e52dc28499392a531d80f57088571e786e52fa37c7
-
Size
3.9MB
-
MD5
c97d657c393888e7c5388ce07e8e4f8e
-
SHA1
2f4c35d01ec36b96632559696401789f413acb70
-
SHA256
350b8cb029bab17df0aed6e52dc28499392a531d80f57088571e786e52fa37c7
-
SHA512
2c8d86fb4843898e1a1bf07f0316664c5bd05fb4dd2b6a10c241d0426015701ef0c7b45233aa9eab19286214e3db105f851c5f1e75567e8b32799d0fa9dfc932
-
SSDEEP
49152:ypzWyLFEFX0oTitTpTTjaq0pPcWxn09mBy11ga/3UXZtHF7qx09H566l2:yfEFX0BTjaEWx60UkXZtF79x566l2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 350b8cb029bab17df0aed6e52dc28499392a531d80f57088571e786e52fa37c7
Files
-
350b8cb029bab17df0aed6e52dc28499392a531d80f57088571e786e52fa37c7.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 3.9MB - Virtual size: 8.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE