Static task
static1
Behavioral task
behavioral1
Sample
010681ffc674edc1390357409555c1d18125921582c743ae90e869826917437d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
010681ffc674edc1390357409555c1d18125921582c743ae90e869826917437d.exe
Resource
win10v2004-20240412-en
General
-
Target
010681ffc674edc1390357409555c1d18125921582c743ae90e869826917437d
-
Size
295KB
-
MD5
2c9e1e578fc8b10db65cd9ea878f74da
-
SHA1
7eb1996a5e395f83b408ab59d2a89846a47e8749
-
SHA256
010681ffc674edc1390357409555c1d18125921582c743ae90e869826917437d
-
SHA512
cd684a5323ed0339aa0ba96e35dd04539ee36a9350875f300e8e0bfc83d1f0d067345b854119c835f1246cc804f2763b6e1ebc764db4d54ab2bc03944508ae69
-
SSDEEP
6144:ztvBPnU1b7e9SQii1EkoNlhlrQ2ZrM2xr5ToSsqwgeoA:Zv1nWdQP1EDhZPxrJsqwD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 010681ffc674edc1390357409555c1d18125921582c743ae90e869826917437d
Files
-
010681ffc674edc1390357409555c1d18125921582c743ae90e869826917437d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
GVD0 Size: - Virtual size: 18.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GVD1 Size: 205KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE