Static task
static1
Behavioral task
behavioral1
Sample
ff7a788eac2dfb15c7bce6982df3a970f6f7669256ee7b688e4f485e22652cce.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ff7a788eac2dfb15c7bce6982df3a970f6f7669256ee7b688e4f485e22652cce.exe
Resource
win10v2004-20240508-en
General
-
Target
ff7a788eac2dfb15c7bce6982df3a970f6f7669256ee7b688e4f485e22652cce
-
Size
72KB
-
MD5
da979df93a6ebfc020aef923ab3d5c6d
-
SHA1
cbf4ed884c17347da9dcb7d38fd7a253ae4134e8
-
SHA256
ff7a788eac2dfb15c7bce6982df3a970f6f7669256ee7b688e4f485e22652cce
-
SHA512
8a4ccca8b42f2da1c34017e26c29a9acc0843f7b0c33740bd9267ba12e356c6ac691201dc5bd70308b42f0f4cd00f38f5a2bc83a3b11da9513755edd938ee796
-
SSDEEP
768:XO10023AQZ9IdzFun3EMMDOVoOdMI+f/1H58fU9UiEb/KEiEixV38Hiv+X2td4A:Xg0FbZSJi01OzB+xRPgUN3QivEtA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff7a788eac2dfb15c7bce6982df3a970f6f7669256ee7b688e4f485e22652cce
Files
-
ff7a788eac2dfb15c7bce6982df3a970f6f7669256ee7b688e4f485e22652cce.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ