Static task
static1
Behavioral task
behavioral1
Sample
ffb6f87f79b6d7c68db5d4cfe61a91879c85ded4ab4a9d06c674665c84de6113.exe
Resource
win7-20240221-en
General
-
Target
ffb6f87f79b6d7c68db5d4cfe61a91879c85ded4ab4a9d06c674665c84de6113
-
Size
399KB
-
MD5
2226b0592d188835788f9c235bc066ee
-
SHA1
654b183bd5e88881f01d66680d0ee0091d0baceb
-
SHA256
ffb6f87f79b6d7c68db5d4cfe61a91879c85ded4ab4a9d06c674665c84de6113
-
SHA512
f36a559c68340ed98d450e3143bc6a2fec9543c76703593842b4824eebe6676998c97064bf6048c41fb0f42d0e210c08a19e5a4b2878d81d15b8d5b043a4c9b5
-
SSDEEP
6144:q+azbRZvLP2zPVz7jUBs8hqcBCi6dbfra4erJlt9A+xX1oOAisEIWmGeNkfGuYFk:q+azbvcahVy41
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffb6f87f79b6d7c68db5d4cfe61a91879c85ded4ab4a9d06c674665c84de6113
Files
-
ffb6f87f79b6d7c68db5d4cfe61a91879c85ded4ab4a9d06c674665c84de6113.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE