Static task
static1
Behavioral task
behavioral1
Sample
143fec49ca4f1a5bde860d0c663f73f16bb7c2cffe6e5f113c4fede88546e708.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
143fec49ca4f1a5bde860d0c663f73f16bb7c2cffe6e5f113c4fede88546e708.exe
Resource
win10v2004-20240419-en
General
-
Target
143fec49ca4f1a5bde860d0c663f73f16bb7c2cffe6e5f113c4fede88546e708
-
Size
104KB
-
MD5
ff2612f362f3d0391ffb14e0ffb624f8
-
SHA1
fbcfcff0dfe5cc6f9569e5c9d06cc6bf47cdac75
-
SHA256
143fec49ca4f1a5bde860d0c663f73f16bb7c2cffe6e5f113c4fede88546e708
-
SHA512
a0323080d4fc250fae547b2004461f2b57c3e0a9edf10232663b2759843f595e21e0a9e0ff16e98561fe12940d7256f51c52cbe0d3ec1a344f546f8ad756b452
-
SSDEEP
3072:WDlZbYZudRCI4Ky2uiBYpTHfG601cbe53x7cEGrhkngpDvchkqbAIQ:WDUZY4P2uiBYpTu60553x4brq2Ah
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 143fec49ca4f1a5bde860d0c663f73f16bb7c2cffe6e5f113c4fede88546e708
Files
-
143fec49ca4f1a5bde860d0c663f73f16bb7c2cffe6e5f113c4fede88546e708.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ajelhf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.didat Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ