Static task
static1
Behavioral task
behavioral1
Sample
ff9f072c91dbf50e516a86e00fe82b4941666c7fe4d9407cf3df550e95b714ec.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
ff9f072c91dbf50e516a86e00fe82b4941666c7fe4d9407cf3df550e95b714ec.exe
Resource
win10v2004-20240508-en
General
-
Target
ff9f072c91dbf50e516a86e00fe82b4941666c7fe4d9407cf3df550e95b714ec
-
Size
148KB
-
MD5
1566e45549d5295ca9f81547bb4d1045
-
SHA1
ece3ba0164bbe57c08e663bea276622eb5dff093
-
SHA256
ff9f072c91dbf50e516a86e00fe82b4941666c7fe4d9407cf3df550e95b714ec
-
SHA512
00744f3f793e4636a27a352e665230bed186a3fa51bdbcdf5376d43b275460d0e7cb5d4b713f055d8aa5124c1f1447fc9d07371aca1bb0c4e7e20cf183b4e451
-
SSDEEP
3072:0iORn4gsYzn+HpiUuo4SlJZiLV2RgOrdJQcs4VTkg6Mad2oS3h3s2dxzjkJEYuCe:zJFzjnKythLrus3GGn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff9f072c91dbf50e516a86e00fe82b4941666c7fe4d9407cf3df550e95b714ec
Files
-
ff9f072c91dbf50e516a86e00fe82b4941666c7fe4d9407cf3df550e95b714ec.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ