Static task
static1
Behavioral task
behavioral1
Sample
c86c8567da08ff25102f56ff58691ede161cfc3ba4cf4cba0cda5a6a0419177d.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c86c8567da08ff25102f56ff58691ede161cfc3ba4cf4cba0cda5a6a0419177d.exe
Resource
win10v2004-20240709-en
General
-
Target
c86c8567da08ff25102f56ff58691ede161cfc3ba4cf4cba0cda5a6a0419177d
-
Size
64KB
-
MD5
db7f529446931183c0203495d3d92db5
-
SHA1
00fa9d97a5458aeeb21c4202e8201753ac6361a3
-
SHA256
c86c8567da08ff25102f56ff58691ede161cfc3ba4cf4cba0cda5a6a0419177d
-
SHA512
f3ba1ab13bea8af51cfdd909b7c65a5742f458855a3ffb28e5b00957fe78647087bf46026f7f7e0ccd04d11a9d9b3ed0e70bf554198ee50910f203ac0c7226ff
-
SSDEEP
768:eX+WSc17t2N9EBveXGVOPb7oV/mxU/g+2p/1H5w0XdnhYakM8heW:qt1p2rAY8V/mxUI+2LZAMCeW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c86c8567da08ff25102f56ff58691ede161cfc3ba4cf4cba0cda5a6a0419177d
Files
-
c86c8567da08ff25102f56ff58691ede161cfc3ba4cf4cba0cda5a6a0419177d.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ