Static task
static1
Behavioral task
behavioral1
Sample
ff18b5dbf790b05de7b6df8c8f65f880N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ff18b5dbf790b05de7b6df8c8f65f880N.exe
Resource
win10v2004-20240709-en
General
-
Target
ff18b5dbf790b05de7b6df8c8f65f880N.exe
-
Size
54KB
-
MD5
ff18b5dbf790b05de7b6df8c8f65f880
-
SHA1
b79d001d1a724fba8093d2c6770d15a39d9af29d
-
SHA256
7e9d80edde9444a125d0b7d7061859b0538002c26317888e5c193a43b495259c
-
SHA512
f87c9db2f2aa6d9ab58dd5b7208f8430b3c3c1755419deddeb35583e74e39e6e34b70820f8341e81078fe7d445efd11a6053f83ba56d7059c9ff6ff1a22d6153
-
SSDEEP
768:1Ndby7nK/7ZayUSPwyLSX5COuvded2nl/UEWqL3vLkIedEPguHPtu7D:1/u7sBPwyLSXFuvYd9EUsHF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff18b5dbf790b05de7b6df8c8f65f880N.exe
Files
-
ff18b5dbf790b05de7b6df8c8f65f880N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 51KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.MPRESS2 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ