Static task
static1
Behavioral task
behavioral1
Sample
acd142c59d5231b6023a84fe209934bdb49e48b5cafd558c4aa307e966bc046bN.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
acd142c59d5231b6023a84fe209934bdb49e48b5cafd558c4aa307e966bc046bN.exe
Resource
win10v2004-20240910-en
General
-
Target
acd142c59d5231b6023a84fe209934bdb49e48b5cafd558c4aa307e966bc046bN
-
Size
1.7MB
-
MD5
f51fd2e2661e3f152a475f305da1f260
-
SHA1
f9dd085150e44f9fd0d8aadb307b8a55cc925e61
-
SHA256
acd142c59d5231b6023a84fe209934bdb49e48b5cafd558c4aa307e966bc046b
-
SHA512
39906200ce1217061296cfacc0c50b2a8a49e6acef4765e375916dbd60a7d5f7a1381586e2df810aaf36ebb164eacacd829cb95cfb43c794b2ae77418c6cd217
-
SSDEEP
49152:Xo7U2dbcPuyH2Sz/5VsxvJ4a7l/m8i8Puil3:47pcPuyWSr2vJ4a7h1l3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acd142c59d5231b6023a84fe209934bdb49e48b5cafd558c4aa307e966bc046bN
Files
-
acd142c59d5231b6023a84fe209934bdb49e48b5cafd558c4aa307e966bc046bN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 247KB - Virtual size: 608KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 120KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 971KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 106KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.halop Size: 328KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE