Static task
static1
Behavioral task
behavioral1
Sample
4187f9370254696ce248e37ffb95553f0700f53b69dd567770cdfd4e79bfe697.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4187f9370254696ce248e37ffb95553f0700f53b69dd567770cdfd4e79bfe697.exe
Resource
win10v2004-20240508-en
General
-
Target
4187f9370254696ce248e37ffb95553f0700f53b69dd567770cdfd4e79bfe697.exe
-
Size
255KB
-
MD5
15b7ede2aeac7224f319ce73864c83d0
-
SHA1
dcbb7a8d9b08b888c927df14d24c0b44dd7868ac
-
SHA256
4187f9370254696ce248e37ffb95553f0700f53b69dd567770cdfd4e79bfe697
-
SHA512
b9ae3c66ffff4797c228e2cc1c7825855cca995f2459cf16ee750993908223360c343f626e3cf9c7915ff8383303e1490821a7d62273e40ba81e38be1d1bf08f
-
SSDEEP
6144:zJFzjnKytq6UqNYQKpZbX6a7xZNjeDTm8OoCqvYsXS:zJFHDMuSpZbKkxZNjeDTmhoTYsXS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4187f9370254696ce248e37ffb95553f0700f53b69dd567770cdfd4e79bfe697.exe
Files
-
4187f9370254696ce248e37ffb95553f0700f53b69dd567770cdfd4e79bfe697.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ