Static task
static1
Behavioral task
behavioral1
Sample
d23e31d94c9927a4962d7b425ad7a6913d2263e99207d1ac3d392e148d58149e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d23e31d94c9927a4962d7b425ad7a6913d2263e99207d1ac3d392e148d58149e.exe
Resource
win10v2004-20240508-en
General
-
Target
d23e31d94c9927a4962d7b425ad7a6913d2263e99207d1ac3d392e148d58149e.exe
-
Size
577KB
-
MD5
1cd9133e9dd4754b6be9e90f2b6221fc
-
SHA1
188eb957a4ac156e239a1d313f29e988c58f7107
-
SHA256
d23e31d94c9927a4962d7b425ad7a6913d2263e99207d1ac3d392e148d58149e
-
SHA512
403389aae7b30a24bc1963196a9a99ddd842a1bb18ed37e421fe1d485ee044558e2769cc018cd228db3ae025636edc13bd56e475dede7210add8bdd7e2638fb3
-
SSDEEP
12288:2/QpfeVGnu6OQqzhm7bsbYP6+fpyfCfsjGHyUMMAiu:fpBQa7bb64p0CKUMTi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d23e31d94c9927a4962d7b425ad7a6913d2263e99207d1ac3d392e148d58149e.exe
Files
-
d23e31d94c9927a4962d7b425ad7a6913d2263e99207d1ac3d392e148d58149e.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 445KB - Virtual size: 445KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 23.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ