Static task
static1
Behavioral task
behavioral1
Sample
ff7b2beed151bb3ee5e0d872493a2797b278e8f899b31932f91bd4cbb190deec.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff7b2beed151bb3ee5e0d872493a2797b278e8f899b31932f91bd4cbb190deec.exe
Resource
win10v2004-20240412-en
General
-
Target
ff7b2beed151bb3ee5e0d872493a2797b278e8f899b31932f91bd4cbb190deec
-
Size
198KB
-
MD5
49e34d9e0e37fd5fab658aacc3389c3a
-
SHA1
862a7372ef9e1252ecf89fd91f0f2ee5a6f9efd5
-
SHA256
ff7b2beed151bb3ee5e0d872493a2797b278e8f899b31932f91bd4cbb190deec
-
SHA512
cf6baa8d2b53921f94d1cb9cbabbe3241f7eb8659806c5cc7a42b869f39c5f41e1f51d5251d863544d764fad8af25539cd17193f1892c17b90325e304ab7fb77
-
SSDEEP
6144:rBs27MMLyX5HXXXDTXXXOGqIII+pXXX5AYjKXXXDoXXXG6XXXxXXXLIIIEAkOCOD:rK20HXXX/XXXFqIIIcXXX5j2XXXcXXXq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff7b2beed151bb3ee5e0d872493a2797b278e8f899b31932f91bd4cbb190deec
Files
-
ff7b2beed151bb3ee5e0d872493a2797b278e8f899b31932f91bd4cbb190deec.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE