Static task
static1
Behavioral task
behavioral1
Sample
861238539edf84561f7bbd494cc96e4f7d2833d43fe2eb93d70537e8ca5fdc47.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
861238539edf84561f7bbd494cc96e4f7d2833d43fe2eb93d70537e8ca5fdc47.exe
Resource
win10v2004-20240508-en
General
-
Target
861238539edf84561f7bbd494cc96e4f7d2833d43fe2eb93d70537e8ca5fdc47
-
Size
14KB
-
MD5
9f854ebc2e2638ff7cd7b173b5d50e97
-
SHA1
283513399600e0f514c35e20a8e5c969c8698855
-
SHA256
861238539edf84561f7bbd494cc96e4f7d2833d43fe2eb93d70537e8ca5fdc47
-
SHA512
e6c6939f37e5af78dc6102e8616ee7d3a7e40655d43a8925e9232f43285921209d05399e615df870e7d729606b47c379a7618c2e083d0539de8c66a4b6e71826
-
SSDEEP
384:G4SPoMTYwHWOs6dfzpIfPDE045HlHLLL:GEUzpIfbAXHLLL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 861238539edf84561f7bbd494cc96e4f7d2833d43fe2eb93d70537e8ca5fdc47
Files
-
861238539edf84561f7bbd494cc96e4f7d2833d43fe2eb93d70537e8ca5fdc47.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ