Static task
static1
Behavioral task
behavioral1
Sample
803166aff7a7e498e812a11dd67040b997c2b496308a7f5c8c498c3476968753.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
803166aff7a7e498e812a11dd67040b997c2b496308a7f5c8c498c3476968753.exe
Resource
win10v2004-20240226-en
General
-
Target
803166aff7a7e498e812a11dd67040b997c2b496308a7f5c8c498c3476968753
-
Size
14KB
-
MD5
9260f0076ebd3191608d9985ef8eac58
-
SHA1
8c4ec6c32bd9600109de6bc1c06293c2307ce852
-
SHA256
803166aff7a7e498e812a11dd67040b997c2b496308a7f5c8c498c3476968753
-
SHA512
a0cfae3b274d488627cf3b1056325372569e8782e11f80a019c126d149e7251ee3cd805ed080d59339603db02606aa95579644b1d10e2ea871d68a3affa00422
-
SSDEEP
384:j2FO+A+W8u0aZiLVVVVVVVMX1uFPTKDE045H/lll:yFdAM8u5cA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 803166aff7a7e498e812a11dd67040b997c2b496308a7f5c8c498c3476968753
Files
-
803166aff7a7e498e812a11dd67040b997c2b496308a7f5c8c498c3476968753.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ