Static task
static1
Behavioral task
behavioral1
Sample
0beb2cd310975f7663baebf16c8109a5f65da56220484f874511ff2a644a2174.exe
Resource
win7-20240221-en
General
-
Target
0beb2cd310975f7663baebf16c8109a5f65da56220484f874511ff2a644a2174.exe
-
Size
1.7MB
-
MD5
8fe813720ec017f5f30176c2c8d46e66
-
SHA1
4b0f2d215599c60e44220b940a5264429e17053a
-
SHA256
0beb2cd310975f7663baebf16c8109a5f65da56220484f874511ff2a644a2174
-
SHA512
8bc58abb43946eec9cf69a4d4dec2c89cdf542cab1d5dff63fa1fc2e761250cfce32544a065d9a4934a91ff5f0ce3e390e405a638a7c02729cacadcf0521f4c3
-
SSDEEP
49152:8I8Xp/FNJEYnRTEpBgsDLLzMdx0psXwPP/AXbtIM:CWYRJkuOewPXArtI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0beb2cd310975f7663baebf16c8109a5f65da56220484f874511ff2a644a2174.exe
Files
-
0beb2cd310975f7663baebf16c8109a5f65da56220484f874511ff2a644a2174.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 174KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 879KB - Virtual size: 880KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE