Static task
static1
Behavioral task
behavioral1
Sample
f259e203897c411d4a00056560d7446ee30e0006ee7c133dc7b884c8c238bf5b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f259e203897c411d4a00056560d7446ee30e0006ee7c133dc7b884c8c238bf5b.exe
Resource
win10v2004-20240426-en
General
-
Target
f259e203897c411d4a00056560d7446ee30e0006ee7c133dc7b884c8c238bf5b
-
Size
83KB
-
MD5
4f3397a1f964a1e5103f3e44bfca9a05
-
SHA1
307424632005856e13c490bfd1b76ed5f61d4ce8
-
SHA256
f259e203897c411d4a00056560d7446ee30e0006ee7c133dc7b884c8c238bf5b
-
SHA512
d94b8cee192c277ba68e217a2f8fd0f47f45c52e1375ef45b6ac10a2ebe9c0380c611405b9d2f0d3b1e28689728c47cbb19966e2f6973c0e90164a009fcd0d62
-
SSDEEP
768:MlbXSdT/icwAHm8w9vRT/i+/XEVVVVBBbXSdT/icwAHm8w9vRT/i+/qkV9VKblx2:w/Tbi+UVVVVH/Tbi+pHwXEa61l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f259e203897c411d4a00056560d7446ee30e0006ee7c133dc7b884c8c238bf5b
Files
-
f259e203897c411d4a00056560d7446ee30e0006ee7c133dc7b884c8c238bf5b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 27KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE