Static task
static1
Behavioral task
behavioral1
Sample
de218f125ca446efc5f37d14012b8884c121ec92ec9f04ca7df76cfa382ebe47.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
de218f125ca446efc5f37d14012b8884c121ec92ec9f04ca7df76cfa382ebe47.exe
Resource
win10v2004-20240508-en
General
-
Target
de218f125ca446efc5f37d14012b8884c121ec92ec9f04ca7df76cfa382ebe47
-
Size
4.6MB
-
MD5
1bd5c0ae0a64b0f6955c3487c527a6a0
-
SHA1
cd69bebf7edc8e948a7358cafc14fb8d5c019503
-
SHA256
de218f125ca446efc5f37d14012b8884c121ec92ec9f04ca7df76cfa382ebe47
-
SHA512
980cf0c4f055797c846bc00edbd8741ad7d099920eedbaa17ada181c6b20a57c9a53a8e6d2bf5639f58db075ec2f77c1ebdb9727f461df87a1709086d6562da0
-
SSDEEP
98304:ITF4Y5GpdR/Yw5wZgvTvCQRM0hNZ7S+CBfl+tS917mGSvKSiKUEu3YSVi/xLUGzX:ITcqPQCe4BktSeXfRVuIS2g6cqkDNA1N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de218f125ca446efc5f37d14012b8884c121ec92ec9f04ca7df76cfa382ebe47
Files
-
de218f125ca446efc5f37d14012b8884c121ec92ec9f04ca7df76cfa382ebe47.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
BQLr Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pqpe Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zoPCM Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE