Static task
static1
Behavioral task
behavioral1
Sample
254e2834f17a40863fdea61862a268670d515ebf6621ab39e40b3cf3b8863007.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
254e2834f17a40863fdea61862a268670d515ebf6621ab39e40b3cf3b8863007.exe
Resource
win10v2004-20240426-en
General
-
Target
254e2834f17a40863fdea61862a268670d515ebf6621ab39e40b3cf3b8863007
-
Size
3.0MB
-
MD5
8209ffd1322fc280929c93c1f3709334
-
SHA1
d13fde3b26c304abd83b402ffe7049722ab52dda
-
SHA256
254e2834f17a40863fdea61862a268670d515ebf6621ab39e40b3cf3b8863007
-
SHA512
fb87a3092cb9bec1c206697f81e896dbf740dc881e2a388d6d5475a2b7e292d24919c039be6e5811486d444a5e85f524001607ef04e02297f2592f40c14a5121
-
SSDEEP
49152:AJL25860fHx1IHVcYYmKu6UZD0vI7m1WcF3dtaSCrL:y25PaY7G3v33dYr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 254e2834f17a40863fdea61862a268670d515ebf6621ab39e40b3cf3b8863007
Files
-
254e2834f17a40863fdea61862a268670d515ebf6621ab39e40b3cf3b8863007.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.1MB
IMAGE_SCN_MEM_READ
data Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 2.3MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
data Size: 108KB - Virtual size: 108KB
IMAGE_SCN_MEM_READ