Static task
static1
Behavioral task
behavioral1
Sample
17bd85d24155bd79d7d842588859861178a325fa6ac85b05971c0a707b707698.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
17bd85d24155bd79d7d842588859861178a325fa6ac85b05971c0a707b707698.exe
Resource
win10v2004-20240802-en
General
-
Target
17bd85d24155bd79d7d842588859861178a325fa6ac85b05971c0a707b707698
-
Size
272KB
-
MD5
d29751fdc2d73035586f46137bf90cb7
-
SHA1
cd72c6ffd4b977125f03b1b9c41e3052987f9786
-
SHA256
17bd85d24155bd79d7d842588859861178a325fa6ac85b05971c0a707b707698
-
SHA512
e114884eb5085ab75be4949d0e373fe7402f6436bf12f292bad527a8be2d0a3aa06afe873b52944ac51ea772077f7d0ed535097434b0cd43dc103b2168be2950
-
SSDEEP
6144:SiADqshAacibB3S/VcjNqS2wLtqTiNOZbsBn6mOWfZVf8YncrBDY:YD/macibB3+wLwq1wG/f8fBDY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17bd85d24155bd79d7d842588859861178a325fa6ac85b05971c0a707b707698
Files
-
17bd85d24155bd79d7d842588859861178a325fa6ac85b05971c0a707b707698.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 245KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE