Static task
static1
Behavioral task
behavioral1
Sample
ffb49b2331c612c4662ee2c57df2b542c5031e292477d87b6a7d0f61cdf5d176.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ffb49b2331c612c4662ee2c57df2b542c5031e292477d87b6a7d0f61cdf5d176.exe
Resource
win10v2004-20240802-en
General
-
Target
ffb49b2331c612c4662ee2c57df2b542c5031e292477d87b6a7d0f61cdf5d176
-
Size
564KB
-
MD5
a4c50e7341e812ec1cf4bc496d47dff7
-
SHA1
6c5311e2b69b9e527f7dbb7f31f7fb916a3f1bf7
-
SHA256
ffb49b2331c612c4662ee2c57df2b542c5031e292477d87b6a7d0f61cdf5d176
-
SHA512
c4fd10099a421c8f766b0a1d49850083ecd145f646928ddaed33ba876b4e879081b93281ab7682d16b81949e7970c3e3040c6d2e59ad8035366c06d7191d9e48
-
SSDEEP
12288:yQyZLRLarjHdREXRYE/gx7kToVElwILK8vdVY/Qy4:gLxandRaRYE/gx7kToWwjO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffb49b2331c612c4662ee2c57df2b542c5031e292477d87b6a7d0f61cdf5d176
Files
-
ffb49b2331c612c4662ee2c57df2b542c5031e292477d87b6a7d0f61cdf5d176.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 504KB - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ