Static task
static1
Behavioral task
behavioral1
Sample
0022b6009732f94d1e95f4aee133f57ced18174fac81f624f576b3ebec8f41ceN.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
0022b6009732f94d1e95f4aee133f57ced18174fac81f624f576b3ebec8f41ceN.exe
Resource
win10v2004-20240802-en
General
-
Target
0022b6009732f94d1e95f4aee133f57ced18174fac81f624f576b3ebec8f41ceN
-
Size
108KB
-
MD5
f4ec645715fb4ceb4f89f395c5e3fe50
-
SHA1
0aabcbc8e085e34b1c2ef45470adece2a90d328f
-
SHA256
0022b6009732f94d1e95f4aee133f57ced18174fac81f624f576b3ebec8f41ce
-
SHA512
782ca68ce14d6e25f49198d2a8c0a8dcc1c82f2eefd3d5ff67d0237a5c45facc2a7658047e3c6b66bce453743855c4cb89ade58adfdd4b139eacaa4a691a7612
-
SSDEEP
3072:NZpbrJrmbkCuVUmbRNx0rNFo4uUjmOiBn3w8BdTj2h3K:DpbrJrmbkC6UmbRj0no4bjVu3w8BdTj/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0022b6009732f94d1e95f4aee133f57ced18174fac81f624f576b3ebec8f41ceN
Files
-
0022b6009732f94d1e95f4aee133f57ced18174fac81f624f576b3ebec8f41ceN.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ