Static task
static1
Behavioral task
behavioral1
Sample
302170f85b76922330fb5f6e7e78e345008dc17c1a969dae29f272e062b0b192N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
302170f85b76922330fb5f6e7e78e345008dc17c1a969dae29f272e062b0b192N.exe
Resource
win10v2004-20240802-en
General
-
Target
302170f85b76922330fb5f6e7e78e345008dc17c1a969dae29f272e062b0b192N
-
Size
64KB
-
MD5
c6d05c26093a3caff966184094389eb0
-
SHA1
c40b9f78b4ef4f48df4978708c37fb320a2d7e34
-
SHA256
302170f85b76922330fb5f6e7e78e345008dc17c1a969dae29f272e062b0b192
-
SHA512
4faf1d9311d8f677602dccb41036a74e7b1edcbe61465318e2ffb886a30ff14ba6e92ff41c68cb23eb73d3fea7f7bc3dd557b1be1403487df482dc1caf9ecf61
-
SSDEEP
1536:C9juGmzTyy2CvEkhFOXtpbdZLhUGH5yW42YUXruCHcpzt/Idn:dhv5qXLOAkWMpFwn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 302170f85b76922330fb5f6e7e78e345008dc17c1a969dae29f272e062b0b192N
Files
-
302170f85b76922330fb5f6e7e78e345008dc17c1a969dae29f272e062b0b192N.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ