Static task
static1
Behavioral task
behavioral1
Sample
970889203dba9cdcfbcbe5f91ae9c69a3d50e1d17b5172ede1206e8cd58e5d63.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
970889203dba9cdcfbcbe5f91ae9c69a3d50e1d17b5172ede1206e8cd58e5d63.exe
Resource
win10v2004-20240426-en
General
-
Target
970889203dba9cdcfbcbe5f91ae9c69a3d50e1d17b5172ede1206e8cd58e5d63
-
Size
14KB
-
MD5
6d9afaea8153d6bd40f7548f2ddc465e
-
SHA1
05d8b619f1574c90b40627731c211c4e1e516096
-
SHA256
970889203dba9cdcfbcbe5f91ae9c69a3d50e1d17b5172ede1206e8cd58e5d63
-
SHA512
661525b7f9a697f677a8b0563eb49740d4edb35227052636f68305269fe71ef91e01764183cc6181c381a3f07417c0d3ad0abc81535272ae160950d1f14a4a0d
-
SSDEEP
192:b3b3lGTvEYUX0Z2IdxUg2d2WCcGppmjOfsbPEk4QZ7x9FAceOGrEa+qDE045HQrk:rk8XU1d0IdcHOWZjH3JOxDE045Hfwww
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 970889203dba9cdcfbcbe5f91ae9c69a3d50e1d17b5172ede1206e8cd58e5d63
Files
-
970889203dba9cdcfbcbe5f91ae9c69a3d50e1d17b5172ede1206e8cd58e5d63.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ