Static task
static1
Behavioral task
behavioral1
Sample
acc34a4042c1746bf83f0cdff9f60ece578005e142d3aa9a70f8684ad65288f3.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
acc34a4042c1746bf83f0cdff9f60ece578005e142d3aa9a70f8684ad65288f3.exe
Resource
win10v2004-20240508-en
General
-
Target
acc34a4042c1746bf83f0cdff9f60ece578005e142d3aa9a70f8684ad65288f3
-
Size
3.5MB
-
MD5
ceaf74514607fc76dd87e98794d4f1ed
-
SHA1
bff16482a3367476202f3918666455d76bab8489
-
SHA256
acc34a4042c1746bf83f0cdff9f60ece578005e142d3aa9a70f8684ad65288f3
-
SHA512
5a3fc558e60a21bed3f00bcee8e86a700eb90e78a803bcb67b57735dfcb26441bf0e576cdf45bcfe5d9f854d76281fd5d396bc713aeeb46117b6bfd4ddf0722f
-
SSDEEP
98304:fXAzv17F86HedtxkcmW4whbmHUxTZkwWlX3dYr:ojhF8CeZkXW4wFmHUNWwWlnq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acc34a4042c1746bf83f0cdff9f60ece578005e142d3aa9a70f8684ad65288f3
Files
-
acc34a4042c1746bf83f0cdff9f60ece578005e142d3aa9a70f8684ad65288f3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.7MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.7MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 184KB - Virtual size: 184KB
IMAGE_SCN_MEM_READ