Static task
static1
Behavioral task
behavioral1
Sample
616e5923a824dc079c8e82ee54671e99ab79448817367d400594ac9855c319bd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
616e5923a824dc079c8e82ee54671e99ab79448817367d400594ac9855c319bd.exe
Resource
win10v2004-20240226-en
General
-
Target
616e5923a824dc079c8e82ee54671e99ab79448817367d400594ac9855c319bd
-
Size
14KB
-
MD5
f532b3435af79c71f4a1d0437f4850e0
-
SHA1
4d124824cc3e4fbbd6adfe4aa93e48efa2ddf5b0
-
SHA256
616e5923a824dc079c8e82ee54671e99ab79448817367d400594ac9855c319bd
-
SHA512
e65ca781bcc5459bbcb1e1e9df09aa8f4689c714dfdd21130a4e5eb84f22a2cddef1d3799ebf23661c94a5dc73cc06e04d988bfa2476c707428795568ee07eec
-
SSDEEP
384:uJkzuFd+uapQAYRK0K0K0K0K0K0K0K0K0K0KDjyJdgDE045H21111:uCKGuRRK0K0K0K0K0K0K0K0K0K0KSJdU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 616e5923a824dc079c8e82ee54671e99ab79448817367d400594ac9855c319bd
Files
-
616e5923a824dc079c8e82ee54671e99ab79448817367d400594ac9855c319bd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ