Static task
static1
Behavioral task
behavioral1
Sample
f468b31ea2bdfa0d8665c8d99c18895c8e28895dae6e8c70ed15425a0e1d8acf.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
f468b31ea2bdfa0d8665c8d99c18895c8e28895dae6e8c70ed15425a0e1d8acf.exe
Resource
win10v2004-20240704-en
General
-
Target
f468b31ea2bdfa0d8665c8d99c18895c8e28895dae6e8c70ed15425a0e1d8acf
-
Size
220KB
-
MD5
6d85ebcbc32c933cb5d8249cf1c333e0
-
SHA1
47f50f2395caf7b01b9cd3832f0136e8c31afbe0
-
SHA256
f468b31ea2bdfa0d8665c8d99c18895c8e28895dae6e8c70ed15425a0e1d8acf
-
SHA512
fbc70753f623b80f0d96182059892c0254f1ffdb8d171e2104d9e91bf23bb2342f52b3e4ae2b40b9a0f087302aaf23a8805101411f49881ed1a03ca00ea325d2
-
SSDEEP
6144:A//ICMmDRxs3NBR7Edysbp7VY7XcagUsYLoMow:A//vi9B1EpaIusYLo0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f468b31ea2bdfa0d8665c8d99c18895c8e28895dae6e8c70ed15425a0e1d8acf
Files
-
f468b31ea2bdfa0d8665c8d99c18895c8e28895dae6e8c70ed15425a0e1d8acf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE