Static task
static1
Behavioral task
behavioral1
Sample
68ea79f13eb59fc8c1375251b1368911289f8979d0dfb0ff7261c2a93dd00309.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
68ea79f13eb59fc8c1375251b1368911289f8979d0dfb0ff7261c2a93dd00309.exe
Resource
win10v2004-20240412-en
General
-
Target
68ea79f13eb59fc8c1375251b1368911289f8979d0dfb0ff7261c2a93dd00309
-
Size
26KB
-
MD5
f659bc365a4924e9c9acfe4b1bc28898
-
SHA1
1fd426575cfd0187b0c37b95878113c89a0a1c5d
-
SHA256
68ea79f13eb59fc8c1375251b1368911289f8979d0dfb0ff7261c2a93dd00309
-
SHA512
f877a2fbda21d4c78a18bc5931ffde45bce0800ca974d465f601f2575dbbe694a8b356fbd875b6c1dac61c60a0ebc628694c7bf2f43651a17806bd71f31330c3
-
SSDEEP
768:uf1ODKAaDMG8H92RwZNQSw+IlJIJJREIOAEeF1:uNfgLdQAQfhJIJ0IO61
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68ea79f13eb59fc8c1375251b1368911289f8979d0dfb0ff7261c2a93dd00309
Files
-
68ea79f13eb59fc8c1375251b1368911289f8979d0dfb0ff7261c2a93dd00309.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE