Static task
static1
Behavioral task
behavioral1
Sample
17370a892838aec8ab8103b055cdd04f12dba6c81ffbdd6ba31fd639fb490102.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
17370a892838aec8ab8103b055cdd04f12dba6c81ffbdd6ba31fd639fb490102.exe
Resource
win10v2004-20240508-en
General
-
Target
17370a892838aec8ab8103b055cdd04f12dba6c81ffbdd6ba31fd639fb490102
-
Size
14KB
-
MD5
f297f726c8875692d1f2ada167bebd16
-
SHA1
28b4e969ebc6e179738eaa70026840c10708fb97
-
SHA256
17370a892838aec8ab8103b055cdd04f12dba6c81ffbdd6ba31fd639fb490102
-
SHA512
f67dcbaca24867c8049987859bb3b20139d0c038596c1d7c72a38be492ee3d90ec43b0df34be9a0f7fa344dc1a4d26e04b7340da64853d0e5c2118da9361ade5
-
SSDEEP
384:5tVuChut7apMZUncjzbJVy+Zx/DE045HTeee:3V9ERapMecjXe4RABeee
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17370a892838aec8ab8103b055cdd04f12dba6c81ffbdd6ba31fd639fb490102
Files
-
17370a892838aec8ab8103b055cdd04f12dba6c81ffbdd6ba31fd639fb490102.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ