Static task
static1
Behavioral task
behavioral1
Sample
d17cff54d4ef5baf8ad7e74fba407e86bb4ccb45136fe3fb7950ee419be20ffe.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d17cff54d4ef5baf8ad7e74fba407e86bb4ccb45136fe3fb7950ee419be20ffe.exe
Resource
win10v2004-20240508-en
General
-
Target
d17cff54d4ef5baf8ad7e74fba407e86bb4ccb45136fe3fb7950ee419be20ffe
-
Size
82KB
-
MD5
eaa8a504e2aa957d229ac97d0111db1f
-
SHA1
bf18fa6b6ec62ef06c186b893347440cdf21cdf5
-
SHA256
d17cff54d4ef5baf8ad7e74fba407e86bb4ccb45136fe3fb7950ee419be20ffe
-
SHA512
900449cc7e82a61049643761be496bf1d80af9b8f1d2b14ea95235251be6eac344f8cf1452217041e21bc07de677b96c8aa02e77a1f3de302c06b3f030295daf
-
SSDEEP
768:agO5xRYi+SfSWHHNvvG5bnl/NqNwsKVDstHxYD0p1aXKynF0vQmYZS0HdJnfWOc:RshfSWHHNvoLqNwDDGw02eQmh0HjWOc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d17cff54d4ef5baf8ad7e74fba407e86bb4ccb45136fe3fb7950ee419be20ffe
Files
-
d17cff54d4ef5baf8ad7e74fba407e86bb4ccb45136fe3fb7950ee419be20ffe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PEC Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE