Static task
static1
Behavioral task
behavioral1
Sample
f61aaf4803f05da93ed95bd4f2705a70N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f61aaf4803f05da93ed95bd4f2705a70N.exe
Resource
win10v2004-20240802-en
General
-
Target
f61aaf4803f05da93ed95bd4f2705a70N.exe
-
Size
468KB
-
MD5
f61aaf4803f05da93ed95bd4f2705a70
-
SHA1
8aced09dc9d30a8ebf581963017f5752e7a431b0
-
SHA256
2c56f34e1b098c3987197c3fbbafc0550ac8f49d43756553d749806082f890e2
-
SHA512
b851e2522402b64bc509053aae2ae9de5b7f5becd8ff5082eb3c87529157e51e1a98291163e502079ba3bfb9cbc5cdd43da1eea362bb4c2f10f65efcbb34a3a6
-
SSDEEP
3072:wq65ogsG5x812bYVPz3yuf8/HCejZILrPmHxvVQN0xE+cy6GEBlV:wqAoCy122PDyuf4OOa0xzz6GE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f61aaf4803f05da93ed95bd4f2705a70N.exe
Files
-
f61aaf4803f05da93ed95bd4f2705a70N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 288KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ