Static task
static1
Behavioral task
behavioral1
Sample
297f7a949219d568e47e52316434a0a0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
297f7a949219d568e47e52316434a0a0N.exe
Resource
win10v2004-20240802-en
General
-
Target
297f7a949219d568e47e52316434a0a0N.exe
-
Size
574KB
-
MD5
297f7a949219d568e47e52316434a0a0
-
SHA1
dbd72182e301e4caebd27ff2027ca0b0b84738b7
-
SHA256
c3b8abfd667b465fe53f8db9256324bf0693754b496b95aef0739585754e1a15
-
SHA512
26f9c28df7a85d36e0ade069036839c2d00d45da2e6132e472131331f008b5cf10f73af3d404403b7aa52903ec982156edcf56494b0dc82b9462fe85030362da
-
SSDEEP
12288:P1/aGLDCMNpNAkoSzZWD8ayX2MQCw7D0QxC6nyw1SgUGP0GQbWawjlN6eytefY2a:P1/aGLDCM4D8ayGMskGst4YJD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 297f7a949219d568e47e52316434a0a0N.exe
Files
-
297f7a949219d568e47e52316434a0a0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 240KB - Virtual size: 239KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 608B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 18KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE