Static task
static1
Behavioral task
behavioral1
Sample
f889e00e9eda24df828deee935016bb8fa4cd25b8f9b10ddf2ff93bb265649ca.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f889e00e9eda24df828deee935016bb8fa4cd25b8f9b10ddf2ff93bb265649ca.exe
Resource
win10v2004-20240412-en
General
-
Target
f889e00e9eda24df828deee935016bb8fa4cd25b8f9b10ddf2ff93bb265649ca
-
Size
61KB
-
MD5
cef6234b9fe31c0f9b0615e370823d5a
-
SHA1
d8f9466bd8b58f3f42fb688a9acc2d62e4c849c8
-
SHA256
f889e00e9eda24df828deee935016bb8fa4cd25b8f9b10ddf2ff93bb265649ca
-
SHA512
80fbbb7912f9ef0c8d45883dda475d83f4774508ec7158e33bfe01bf494a85ac13483fcd2c9433c099c4478420b824f1b444e2e9b9674429cf1d3524366fa1ef
-
SSDEEP
768:s1ODKAaDMG8H92RwZNQSwcfymNBg+g61GoLOwMnXpBTR0cII1pu8+w0JHZEDvj7r:2fgLdQAQfcfymNiwcL/B14fLJHUvKJrA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f889e00e9eda24df828deee935016bb8fa4cd25b8f9b10ddf2ff93bb265649ca
Files
-
f889e00e9eda24df828deee935016bb8fa4cd25b8f9b10ddf2ff93bb265649ca.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE