Static task
static1
Behavioral task
behavioral1
Sample
f625ff45cfb46009603e4855bb9fe3dd7e3baefbfe9fafa14456c63e70154d43.exe
Resource
win7-20240221-en
General
-
Target
f625ff45cfb46009603e4855bb9fe3dd7e3baefbfe9fafa14456c63e70154d43
-
Size
262KB
-
MD5
08c1efdf3298a7c5ceae31d274630c91
-
SHA1
832384874459e15655a1befb4546e70f37d6125a
-
SHA256
f625ff45cfb46009603e4855bb9fe3dd7e3baefbfe9fafa14456c63e70154d43
-
SHA512
cf945985e8172f7a769de7dd613f6df4d1e3c67f7a21435f234b44b840f51f9e5fb6f106a69c3eb2111d15f8717b29c25b4e1ae6bd538d35cabb3e04e21b0531
-
SSDEEP
1536:B8M4W8tbRRet868eILFkbeumIkA39xSZW175V7UZQJ0UjsWpcdVO4Mqg+aJRaCA3:B8VtbX8VLRkgUA1nQZwFGVO4Mqg+WDY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f625ff45cfb46009603e4855bb9fe3dd7e3baefbfe9fafa14456c63e70154d43
Files
-
f625ff45cfb46009603e4855bb9fe3dd7e3baefbfe9fafa14456c63e70154d43.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE