Resubmissions
13-09-2021 08:08
210913-j1qvdsdch3 10Static task
static1
Behavioral task
behavioral1
Sample
4177267c7688e0a4879695e76b87c4f00f91189a318288c9345a2fb3a9d50664.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4177267c7688e0a4879695e76b87c4f00f91189a318288c9345a2fb3a9d50664.exe
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
4177267c7688e0a4879695e76b87c4f00f91189a318288c9345a2fb3a9d50664.exe
Resource
win10v2004-20240412-en
General
-
Target
4177267c7688e0a4879695e76b87c4f00f91189a318288c9345a2fb3a9d50664
-
Size
1.2MB
-
MD5
3719c2d7abe621d208c853cc425861d2
-
SHA1
3f317891a950a1a5e01b7e10715f8d62e5cf0f1f
-
SHA256
4177267c7688e0a4879695e76b87c4f00f91189a318288c9345a2fb3a9d50664
-
SHA512
d43c7487903a043cdd73fe3de3cdd87f9fe40277cdad55356061f6771b76f427049d5354b9c8f308badc946f451070d281d0421e9f8623d6922e7c59a10ae449
-
SSDEEP
12288:u+rq0yKJ7KZeBA4DVzlzEyn2QFqTjCAjkTnV/QH7OTzId2nfpN3fXQ:FW0yreAkpzP/QCAjkTmbOwYRZg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4177267c7688e0a4879695e76b87c4f00f91189a318288c9345a2fb3a9d50664
Files
-
4177267c7688e0a4879695e76b87c4f00f91189a318288c9345a2fb3a9d50664.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 319KB - Virtual size: 318KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 922KB - Virtual size: 922KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ