Static task
static1
Behavioral task
behavioral1
Sample
f2939de2b43f6d4372c622549d72d12b47943af12e249834e65dfebb3c5b119e.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f2939de2b43f6d4372c622549d72d12b47943af12e249834e65dfebb3c5b119e.exe
Resource
win10v2004-20240412-en
General
-
Target
f2939de2b43f6d4372c622549d72d12b47943af12e249834e65dfebb3c5b119e
-
Size
4.4MB
-
MD5
692b5b88ab3a74029f6bff424d8f2d8c
-
SHA1
ff2d3ad6cca9127690bc8faeacb487ffd1a56fa3
-
SHA256
f2939de2b43f6d4372c622549d72d12b47943af12e249834e65dfebb3c5b119e
-
SHA512
d51027229587927426003007a08c408ab9489c76b7a8b8a9d370579cc1aec9b20e1173bb811e65a4879d1cbb52e7ed2f4507109dc956900207c231c1f72ad2f9
-
SSDEEP
49152:1LxAhgiZuaH6QQI6wpe3i5oFSR5FOuf99WKRYo9X7/5z4UaSnKTxjeM5mFVdQQi:7MZ6/IPA3i6w5FOMRYKp4hH5mI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2939de2b43f6d4372c622549d72d12b47943af12e249834e65dfebb3c5b119e
Files
-
f2939de2b43f6d4372c622549d72d12b47943af12e249834e65dfebb3c5b119e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE