Static task
static1
Behavioral task
behavioral1
Sample
20ea940feda93df13c7cfee9e7b9945a1648fd0a9af70ff901f42c223c897074.exe
Resource
win7-20240508-en
General
-
Target
20ea940feda93df13c7cfee9e7b9945a1648fd0a9af70ff901f42c223c897074
-
Size
15.8MB
-
MD5
97c0091261c438ec7ea0f772e1e23365
-
SHA1
b8b46ba0cecc7e2c82f886e32465dae5f85b46cf
-
SHA256
20ea940feda93df13c7cfee9e7b9945a1648fd0a9af70ff901f42c223c897074
-
SHA512
939db98a2a6eda2ce22dbfabda8db025b9add95ec443fc052ffbc2a2e10bf2e8cbfea476c61f3fa88d562179cedf9819f86f0042ccbc11cc40d74889580d4a36
-
SSDEEP
393216:zfC/m7R7ow2tqWLhPrXW6bqs63g82j0IFH/gOaGgz0:zH7R+EWLhjW6bqVM0MfxP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 20ea940feda93df13c7cfee9e7b9945a1648fd0a9af70ff901f42c223c897074
Files
-
20ea940feda93df13c7cfee9e7b9945a1648fd0a9af70ff901f42c223c897074.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 804KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 4.7MB - Virtual size: 13.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 44KB - Virtual size: 706KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.winlice Size: - Virtual size: 15.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 10.3MB - Virtual size: 10.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ