Static task
static1
Behavioral task
behavioral1
Sample
d0ffbed88104757ec6be05710378238e91a978580a0c7202cbeb33daca641703N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0ffbed88104757ec6be05710378238e91a978580a0c7202cbeb33daca641703N.exe
Resource
win10v2004-20240910-en
General
-
Target
d0ffbed88104757ec6be05710378238e91a978580a0c7202cbeb33daca641703N
-
Size
402KB
-
MD5
ca1fce202aa4ae89d297acc9c036e900
-
SHA1
0569bf8677ff00aa8a35e230b6c10dc3c214399b
-
SHA256
d0ffbed88104757ec6be05710378238e91a978580a0c7202cbeb33daca641703
-
SHA512
c04272612eedb78405531693c5988955146ab6168ecad41690876a638a8d4abcb95347c6ee0338bbdcad4cdddf74a51d007123fba57f70d1a69c172642142be1
-
SSDEEP
6144:ciPZT5rtwbC4BzGHAu+17VfpgPQusItPXLqt4ZM4dbg9gRrp5PW8uJ3ou0tqkZKF:RT5J3HA/jfSXs6bqtkRDRrLuJ4fqk4F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0ffbed88104757ec6be05710378238e91a978580a0c7202cbeb33daca641703N
Files
-
d0ffbed88104757ec6be05710378238e91a978580a0c7202cbeb33daca641703N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ