Static task
static1
Behavioral task
behavioral1
Sample
17481f220bf5692f5c09182146ba9c94d518b28a4db922bfbafd3aaceba56300.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
17481f220bf5692f5c09182146ba9c94d518b28a4db922bfbafd3aaceba56300.exe
Resource
win10v2004-20240508-en
General
-
Target
17481f220bf5692f5c09182146ba9c94d518b28a4db922bfbafd3aaceba56300
-
Size
14KB
-
MD5
84d241257b87ab568302bdf61c486cba
-
SHA1
1416d235052f60bc25d217de57f7724028b6fdaf
-
SHA256
17481f220bf5692f5c09182146ba9c94d518b28a4db922bfbafd3aaceba56300
-
SHA512
fdf03159dd572ad98a55baec58716b996603a201fbe2d466b36726d386a15d5879855ba390f8c558b8a43730ad590909252cc00ef5302cc9fcdd4abc697ffca2
-
SSDEEP
384:AZBGvkFBWGJ0b2yHhdGc1UEdIDE045HlZZZ:4mMEGylHvfdSA3ZZZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17481f220bf5692f5c09182146ba9c94d518b28a4db922bfbafd3aaceba56300
Files
-
17481f220bf5692f5c09182146ba9c94d518b28a4db922bfbafd3aaceba56300.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ