Static task
static1
Behavioral task
behavioral1
Sample
1fc252076292f90c374e796649fc4a785c7d7ed88ca0c02ed50198257226a442.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1fc252076292f90c374e796649fc4a785c7d7ed88ca0c02ed50198257226a442.exe
Resource
win10v2004-20240802-en
General
-
Target
1fc252076292f90c374e796649fc4a785c7d7ed88ca0c02ed50198257226a442
-
Size
681KB
-
MD5
cd7081f92d93bb3a44c87f0f910a7307
-
SHA1
2418cfabe23f32e4b04891e34f27450a42409d4c
-
SHA256
1fc252076292f90c374e796649fc4a785c7d7ed88ca0c02ed50198257226a442
-
SHA512
4d03f34e0477bf68fcb7b1d07456fb35d072bd482acfb33e0ecc0dac98c07c777ecf7e32c520af263e19dd8636b7c4414c7c1022a37b0b8710bdf38b112dbc95
-
SSDEEP
12288:y40kYZj5YP1sUobYdIrjgtdEyDewwK8aEgMgGbWhc0I3sCdzx:ydkYdUoQIrktdEwuKSXWhQ3sCP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1fc252076292f90c374e796649fc4a785c7d7ed88ca0c02ed50198257226a442
Files
-
1fc252076292f90c374e796649fc4a785c7d7ed88ca0c02ed50198257226a442.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 65KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 327KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE