Static task
static1
Behavioral task
behavioral1
Sample
c208b05e313242ab89b98a75723de7d2c9955775fa5ce97edf14b5101c504131N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c208b05e313242ab89b98a75723de7d2c9955775fa5ce97edf14b5101c504131N.exe
Resource
win10v2004-20240802-en
General
-
Target
c208b05e313242ab89b98a75723de7d2c9955775fa5ce97edf14b5101c504131N
-
Size
1.9MB
-
MD5
2ac264f8a8ea235b6c010f7f3cd21a20
-
SHA1
0b299ca9b5af63a26ce0819f0d329d9c4ebfb41e
-
SHA256
c208b05e313242ab89b98a75723de7d2c9955775fa5ce97edf14b5101c504131
-
SHA512
e78969b7261cad685397f9d20bffee7d23296fdd997f8512aa9e759993c3244681cf33cdba6e5a4ed4eb49e441cbe6a6af054858614053c1625239f44838c674
-
SSDEEP
49152:NGJenksa1kdyVddbwJcVeCSMdcdXLZ9d/n:NGJen16kMfdUJwedZvP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c208b05e313242ab89b98a75723de7d2c9955775fa5ce97edf14b5101c504131N
Files
-
c208b05e313242ab89b98a75723de7d2c9955775fa5ce97edf14b5101c504131N.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 553KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
12jgh80 Size: - Virtual size: 906KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
12jgh81 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ