Static task
static1
Behavioral task
behavioral1
Sample
17d08981ee3ed001add6509ffb235e3d3e4f2483bd7a62aa99eaba8f9c2db851.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
17d08981ee3ed001add6509ffb235e3d3e4f2483bd7a62aa99eaba8f9c2db851.exe
Resource
win10v2004-20240508-en
General
-
Target
17d08981ee3ed001add6509ffb235e3d3e4f2483bd7a62aa99eaba8f9c2db851
-
Size
5.1MB
-
MD5
c29b0ab6fd399062045e9979c85ebae9
-
SHA1
65253367028caef89fd365e17b6e06433dc49574
-
SHA256
17d08981ee3ed001add6509ffb235e3d3e4f2483bd7a62aa99eaba8f9c2db851
-
SHA512
77ac9e4b9e522d48a8707cdd5e31769471d69a470702f0a8ba358926cf48fe8b1bd317723ec1e1927f0ce9fcaa59bb899bb067982f8618f129375a8689b80cbe
-
SSDEEP
98304:wTKnzjS5V7aaWWiT+5eBFmxeN1IjLSbdN8u/HWkptzk9IYflcwS:qKqrDU8enmxeN1+LuAu/2kplROhS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17d08981ee3ed001add6509ffb235e3d3e4f2483bd7a62aa99eaba8f9c2db851
Files
-
17d08981ee3ed001add6509ffb235e3d3e4f2483bd7a62aa99eaba8f9c2db851.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 348KB - Virtual size: 641KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 28KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 24KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.2MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 132KB - Virtual size: 255KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.winlice Size: - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ