Static task
static1
Behavioral task
behavioral1
Sample
f219211e9a7fffacf689445c5e5cbdaeb6d79dbeb7ec6310c4395e85daf8f9c3.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f219211e9a7fffacf689445c5e5cbdaeb6d79dbeb7ec6310c4395e85daf8f9c3.exe
Resource
win10v2004-20240802-en
General
-
Target
f219211e9a7fffacf689445c5e5cbdaeb6d79dbeb7ec6310c4395e85daf8f9c3
-
Size
90KB
-
MD5
c32428c480ffb98524ad05787be21b1c
-
SHA1
c3eec8d45d66045f1e32b6696c2618f05fd8a675
-
SHA256
f219211e9a7fffacf689445c5e5cbdaeb6d79dbeb7ec6310c4395e85daf8f9c3
-
SHA512
24f8ff5245ff5718c894e704272df1c383c93b64f68cb22c2610471ce8479914c11d843f6ee0ebbbce71500275ea33ccd055128f6e8dcdb64f3def19ab6804c6
-
SSDEEP
1536:XKqyjrx/CkGWFIeNN20H/cK13umnGffE/e18sNcuXN3q3ZXofOOQ/4BrGTI5Yxj:XKqgtCkfKeP20fl13FGc/e156uXN3qJf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f219211e9a7fffacf689445c5e5cbdaeb6d79dbeb7ec6310c4395e85daf8f9c3
Files
-
f219211e9a7fffacf689445c5e5cbdaeb6d79dbeb7ec6310c4395e85daf8f9c3.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.pdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ