Static task
static1
Behavioral task
behavioral1
Sample
ffc00d703d099c60c3be60ceb83c48df5f4eda030b50889fb83a4c2abc7141e8.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ffc00d703d099c60c3be60ceb83c48df5f4eda030b50889fb83a4c2abc7141e8.exe
Resource
win10v2004-20240226-en
General
-
Target
ffc00d703d099c60c3be60ceb83c48df5f4eda030b50889fb83a4c2abc7141e8
-
Size
691KB
-
MD5
00c47358b1d8bb7d095d7544f6805497
-
SHA1
079ef4e6db080ad17fa63e5339af180d59227e65
-
SHA256
ffc00d703d099c60c3be60ceb83c48df5f4eda030b50889fb83a4c2abc7141e8
-
SHA512
f49e0999e45ca3ee92b68b9887a427ff2c754fa36445a608e01f124f978302de6f46be229eafae756d2c05a15e643ef6f78baef813698eeb56ed067c827c6da6
-
SSDEEP
6144:RuJnLpKXM/iPQ8FKir/pF1TT/X4sW9dvCtZkIJcv0gQP9klnC/yPQ8FKir/pF1TJ:hMyxTTBYLCSxTTBY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffc00d703d099c60c3be60ceb83c48df5f4eda030b50889fb83a4c2abc7141e8
Files
-
ffc00d703d099c60c3be60ceb83c48df5f4eda030b50889fb83a4c2abc7141e8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE