Static task
static1
Behavioral task
behavioral1
Sample
111f41de1f404d0af1a36bbd03dd90048ef226b2091c3da535026466b5eb1edb.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
111f41de1f404d0af1a36bbd03dd90048ef226b2091c3da535026466b5eb1edb.exe
Resource
win10v2004-20240611-en
General
-
Target
111f41de1f404d0af1a36bbd03dd90048ef226b2091c3da535026466b5eb1edb
-
Size
80KB
-
MD5
635c2e3795b07bd6d6ed995e7d4bb713
-
SHA1
970e1a5b1c9281b423352d27517b81b1e40b2d05
-
SHA256
111f41de1f404d0af1a36bbd03dd90048ef226b2091c3da535026466b5eb1edb
-
SHA512
d8471a8fe643144ed6d73c56750ab06ebb1a22d0de36b66c247c73f4de9aeb02b58b142a17464c8afbd41b556e0a6bbc5e6d42c779616b77dd46017f2f29b0e3
-
SSDEEP
1536:1gO79/5imrd2kLlXKuBQ2LHbaIZTJ+7LhkiB0:1DbDJKuBB7aMU7ui
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 111f41de1f404d0af1a36bbd03dd90048ef226b2091c3da535026466b5eb1edb
Files
-
111f41de1f404d0af1a36bbd03dd90048ef226b2091c3da535026466b5eb1edb.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.idata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kofbl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ