Static task
static1
Behavioral task
behavioral1
Sample
c30975378ac041da91f2c609579ee0d639a5b05d0d21e7f554b6f5e8f078cb7aN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c30975378ac041da91f2c609579ee0d639a5b05d0d21e7f554b6f5e8f078cb7aN.exe
Resource
win10v2004-20240802-en
General
-
Target
c30975378ac041da91f2c609579ee0d639a5b05d0d21e7f554b6f5e8f078cb7aN
-
Size
615KB
-
MD5
e70a8b63bb4f24063e48492d8b8e5de0
-
SHA1
5de344c1f1219400e2c41eec5a70ee596610c2ef
-
SHA256
c30975378ac041da91f2c609579ee0d639a5b05d0d21e7f554b6f5e8f078cb7a
-
SHA512
80cae9d1e66db153e2d0dd7851576d0b94d0e8f391af9244b2fc49c2db00ab2bfeae04d5359c4b625ba5e9819d34bf270199e1c35c4f57869c7a529c99484cd9
-
SSDEEP
12288:gedVkVPjN5tzVin190AaCGrDM1urLw3NtD8OVNzBMTycI1v+9vsBHQIIW:uj/C/0LDuunstDdE0Z+9Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c30975378ac041da91f2c609579ee0d639a5b05d0d21e7f554b6f5e8f078cb7aN
Files
-
c30975378ac041da91f2c609579ee0d639a5b05d0d21e7f554b6f5e8f078cb7aN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 258KB - Virtual size: 652KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 322KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE