Static task
static1
Behavioral task
behavioral1
Sample
d2bbb93138116eeed13dccd96dcc69f54977ea3ead375810402e8b0efe161173.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d2bbb93138116eeed13dccd96dcc69f54977ea3ead375810402e8b0efe161173.exe
Resource
win10v2004-20240419-en
General
-
Target
d2bbb93138116eeed13dccd96dcc69f54977ea3ead375810402e8b0efe161173
-
Size
2.2MB
-
MD5
8de5580df1b3fb1cfdb95b7bdaa6febf
-
SHA1
2ca0a66ffbebf3c44e05439822793a974dc5e56c
-
SHA256
d2bbb93138116eeed13dccd96dcc69f54977ea3ead375810402e8b0efe161173
-
SHA512
79a1de5bea8d682486eb520b0ff9460b87364a839e65d8f8e9a4d7995d4151c020cd42267f1e24bf4570aad1514e9afb6d89d0526ea631f4e76a3dc67ba4cb63
-
SSDEEP
49152:q7DEmCd7ei0elaGJo08JfcgelMlionnSTAc:BgJkgBioPc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2bbb93138116eeed13dccd96dcc69f54977ea3ead375810402e8b0efe161173
Files
-
d2bbb93138116eeed13dccd96dcc69f54977ea3ead375810402e8b0efe161173.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE