Static task
static1
Behavioral task
behavioral1
Sample
c688b8d133d492f90499d05f87818428d8a96ad55ff6c63f07cc145075478c17.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c688b8d133d492f90499d05f87818428d8a96ad55ff6c63f07cc145075478c17.exe
Resource
win10v2004-20240508-en
General
-
Target
c688b8d133d492f90499d05f87818428d8a96ad55ff6c63f07cc145075478c17
-
Size
116KB
-
MD5
2b136ab436fd2a11c514c97cf56899d3
-
SHA1
ceae6a4000a5a76e94f36e9fc90ed04bfbbb213f
-
SHA256
c688b8d133d492f90499d05f87818428d8a96ad55ff6c63f07cc145075478c17
-
SHA512
e9eaca28cef3f02acf3ac96474fe03d53dbc88779d1cee0cb01c4f1828fe131b7ad207bf4468ff4e53e24d323a606f326f5cc283b191a7bbcd23fbfa01554b8a
-
SSDEEP
3072:EagwS1Ut+KNPJI1F3Md55keTZwcM2I38QXy:vUGPJKF3Md55ZTZwz38QX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c688b8d133d492f90499d05f87818428d8a96ad55ff6c63f07cc145075478c17
Files
-
c688b8d133d492f90499d05f87818428d8a96ad55ff6c63f07cc145075478c17.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ue Size: 222B - Virtual size: 222B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE