Static task
static1
Behavioral task
behavioral1
Sample
f2187d2c251c9744b71ae999a38c5960N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f2187d2c251c9744b71ae999a38c5960N.exe
Resource
win10v2004-20240802-en
General
-
Target
f2187d2c251c9744b71ae999a38c5960N.exe
-
Size
112KB
-
MD5
f2187d2c251c9744b71ae999a38c5960
-
SHA1
04728b15263daed484e710c5dedac32c99da54cd
-
SHA256
c9029a3fe9641c9c3c9f1b313c3daeafcbf5d6cb7dbf389d3b7e83a76b555239
-
SHA512
4300818a01b6482ef20193335cbd73988e9a05e2022ddae2015dcbd4d5752a21d74ff0bf85e98e1b4207ba24c55d33d8fbdc00de2d13b37227b24c95a920bd26
-
SSDEEP
3072:v0b0kNifFPRf/HhHi/5vgnUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUeUUUmuUUq9:cDiNJk/5CUUUUUUUUUUUUUUUUUUUUUUm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2187d2c251c9744b71ae999a38c5960N.exe
Files
-
f2187d2c251c9744b71ae999a38c5960N.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ