Static task
static1
Behavioral task
behavioral1
Sample
20e49907916362ee18f59d8926dd0da58e4a28334f195ae0b7e42efc8a5208d8.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
20e49907916362ee18f59d8926dd0da58e4a28334f195ae0b7e42efc8a5208d8.exe
Resource
win10v2004-20240802-en
General
-
Target
20e49907916362ee18f59d8926dd0da58e4a28334f195ae0b7e42efc8a5208d8
-
Size
352KB
-
MD5
b3bcf4abf260a5f56517eda534e3e7d8
-
SHA1
fae5b7d12752c3948479e0deaf3e8fa639e7d03d
-
SHA256
20e49907916362ee18f59d8926dd0da58e4a28334f195ae0b7e42efc8a5208d8
-
SHA512
cf8c5244f95f77fafb31e49a71fbd2e03347fa22c13affe135610cc655a76d746416b0b32791c54d5cdd4741abad3d8bebaf48c494a36cf719ae617ac7439e30
-
SSDEEP
6144:Nonlknrnpr1ItvLUErOU7amYBAYpd0ucyEWJrj1mKZHPSv/rpwMBhpNFdFf52SC8:1FrCZYE6YYBHpd0uD319ZvSntnhp3520
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20e49907916362ee18f59d8926dd0da58e4a28334f195ae0b7e42efc8a5208d8
Files
-
20e49907916362ee18f59d8926dd0da58e4a28334f195ae0b7e42efc8a5208d8.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ