Static task
static1
Behavioral task
behavioral1
Sample
0897c8a6f1b299f4e35fcdb7ec44de7e1dfef85bbf78b7a860c0b37e943293f7.exe
Resource
win7-20240729-en
General
-
Target
0897c8a6f1b299f4e35fcdb7ec44de7e1dfef85bbf78b7a860c0b37e943293f7
-
Size
6.1MB
-
MD5
53b45209891512f4d5fbce46e23e8cc2
-
SHA1
2aa4823e794f3418c40a31f9961cefb972b36fc3
-
SHA256
0897c8a6f1b299f4e35fcdb7ec44de7e1dfef85bbf78b7a860c0b37e943293f7
-
SHA512
744c00b6e61b010470bd79aef58fa6411f5bec8eb9d88f051d0d91aaaec7bf8d4817492036677784d8922625fb2ebe7cffad9f4abade3970103b4bdaffd332fd
-
SSDEEP
196608:jyx8fijAEayjFtRo8tIhjwzMtGuQHhzB2:jgjAEayjFtfIhszMtyHn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0897c8a6f1b299f4e35fcdb7ec44de7e1dfef85bbf78b7a860c0b37e943293f7
Files
-
0897c8a6f1b299f4e35fcdb7ec44de7e1dfef85bbf78b7a860c0b37e943293f7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 320KB - Virtual size: 612KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 32KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 28KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.winlice Size: - Virtual size: 8.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 5.7MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ