Static task
static1
Behavioral task
behavioral1
Sample
f3ddba1256313f58d6e642bb7f072039f3716c45d1b04aed556614c88d22c89c.exe
Resource
win7-20240221-en
General
-
Target
f3ddba1256313f58d6e642bb7f072039f3716c45d1b04aed556614c88d22c89c
-
Size
66KB
-
MD5
2d3ebf188aa745ac1d03fd1010446a38
-
SHA1
aa70b18278d7c5bcdfc42a4334ed7d9e9712f242
-
SHA256
f3ddba1256313f58d6e642bb7f072039f3716c45d1b04aed556614c88d22c89c
-
SHA512
ef151939beb58a601d36622d215b526092f14bed3f90f40f194aaf750e60f90c5ab075fde8fc3723371688fbc84f7157852d7bdcdc912ad9c6f402dcec1156cf
-
SSDEEP
1536:/BNsrz8VuJlMXaDuiNIiS4qz0XSW3iG47fy:/BA8ulMXaKSS4qz3G47a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3ddba1256313f58d6e642bb7f072039f3716c45d1b04aed556614c88d22c89c
Files
-
f3ddba1256313f58d6e642bb7f072039f3716c45d1b04aed556614c88d22c89c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE