Static task
static1
Behavioral task
behavioral1
Sample
f697e0781d9684ef49f66924b3381be297e55a349263afa3b54d48e5a2bc3cbd.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f697e0781d9684ef49f66924b3381be297e55a349263afa3b54d48e5a2bc3cbd.exe
Resource
win10v2004-20240802-en
General
-
Target
f697e0781d9684ef49f66924b3381be297e55a349263afa3b54d48e5a2bc3cbd
-
Size
66KB
-
MD5
80fe20aefe3c0626a6b7598d9b8f570c
-
SHA1
331463d588b215bd9febb45263d84f5d2ec7bb15
-
SHA256
f697e0781d9684ef49f66924b3381be297e55a349263afa3b54d48e5a2bc3cbd
-
SHA512
29298513106e93ecbb46727e7e9b3af45dcbcf5af8346b948ab36bcf40a82dc4607651b041064c2ac3af758122c9eb74c8c7f49adc95893f05d5e3d413b94e4e
-
SSDEEP
768:pcPW16GVRu1yK9fMnJG2V9dHS8HNic1iTEpgSG9TJVQBWZrvW5TNDWfKgUkKtzYY:pP3SHuJV9NBriw+d9bHrkT5gUHz7FxtJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f697e0781d9684ef49f66924b3381be297e55a349263afa3b54d48e5a2bc3cbd
Files
-
f697e0781d9684ef49f66924b3381be297e55a349263afa3b54d48e5a2bc3cbd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE