Static task
static1
Behavioral task
behavioral1
Sample
cf91a1466229c92609668777dbd8e0154545c0c71b1458535de4e1279a8983f8.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
cf91a1466229c92609668777dbd8e0154545c0c71b1458535de4e1279a8983f8.exe
Resource
win10v2004-20240508-en
General
-
Target
cf91a1466229c92609668777dbd8e0154545c0c71b1458535de4e1279a8983f8
-
Size
286KB
-
MD5
37169d7d42011ceabc7d633e157e83e1
-
SHA1
56f05e4db173d1ea0574d2762ecad908f4e0a3a4
-
SHA256
cf91a1466229c92609668777dbd8e0154545c0c71b1458535de4e1279a8983f8
-
SHA512
cbedd6a40463ba92a9a74273677f6c478ab0aaa55d746f091c2331ca4f65c19c98daa6278cd0279bd7e588340a446de7c27e0c1d54fbe21ae7c31391c9654ced
-
SSDEEP
6144:zJFzjKA8e+XJy5UpOENwjgzUpg8wuHzkq+:zJFKZy566gzU28wyoT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf91a1466229c92609668777dbd8e0154545c0c71b1458535de4e1279a8983f8
Files
-
cf91a1466229c92609668777dbd8e0154545c0c71b1458535de4e1279a8983f8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ