Static task
static1
Behavioral task
behavioral1
Sample
f2791231e18d7b8a6f14e37f84809fa6a1551faacf13aa69be1df33b6e77d7cc.exe
Resource
win7-20240221-en
General
-
Target
f2791231e18d7b8a6f14e37f84809fa6a1551faacf13aa69be1df33b6e77d7cc
-
Size
274KB
-
MD5
014195da2861f1a230f9c43190481bec
-
SHA1
4fa31ccda65766cc95fa62fd625c764df7e33838
-
SHA256
f2791231e18d7b8a6f14e37f84809fa6a1551faacf13aa69be1df33b6e77d7cc
-
SHA512
dbab4603bd842c9046575aeec529d5af6631d0c537b1bdcaaf63a89ad7279ccb8794f6c9f00312e3fd8a54d4efa03ff44d8f05f279e84711025987160c0afd83
-
SSDEEP
3072:8hOm2sI93UufdC67cimD5t251UrRE9TTFl:8cm7ImGddXmNt251UriZFl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource f2791231e18d7b8a6f14e37f84809fa6a1551faacf13aa69be1df33b6e77d7cc
Files
-
f2791231e18d7b8a6f14e37f84809fa6a1551faacf13aa69be1df33b6e77d7cc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.rsrc Size: 155KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE