Static task
static1
Behavioral task
behavioral1
Sample
ff75b7fb78bcad2a2d99d52a1900dcc9151941a8dd5aad5fef8ab4e595ce2752.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ff75b7fb78bcad2a2d99d52a1900dcc9151941a8dd5aad5fef8ab4e595ce2752.exe
Resource
win10v2004-20240426-en
General
-
Target
ff75b7fb78bcad2a2d99d52a1900dcc9151941a8dd5aad5fef8ab4e595ce2752
-
Size
2.4MB
-
MD5
a1e1edcbaaa2cfbaa1a2d68eb0d594e0
-
SHA1
07949e6ed4bed71cf9297e703e5e970b0d33adc7
-
SHA256
ff75b7fb78bcad2a2d99d52a1900dcc9151941a8dd5aad5fef8ab4e595ce2752
-
SHA512
144a7cd5cecf8e7de6f723ce5ca29543428e288369a37512c4b756c39d37b63e4f5999ce423388d89b6acce232177e413e715a38024a8a2036ef65449b14acc7
-
SSDEEP
49152:oZQN2skpzPXDFBjWRJTCAIHuDeeaJ98mjRC9YC2Ns+/X0h54GEewKk:q62bz/5YvpI2eey98CRC4L0ZRbk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff75b7fb78bcad2a2d99d52a1900dcc9151941a8dd5aad5fef8ab4e595ce2752
Files
-
ff75b7fb78bcad2a2d99d52a1900dcc9151941a8dd5aad5fef8ab4e595ce2752.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.Upack Size: 150KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE