Static task
static1
Behavioral task
behavioral1
Sample
398393edaac73ad62615a5e9ff13e9a77075ed206356ce1807f5f30e8995d482N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
398393edaac73ad62615a5e9ff13e9a77075ed206356ce1807f5f30e8995d482N.exe
Resource
win10v2004-20241007-en
General
-
Target
398393edaac73ad62615a5e9ff13e9a77075ed206356ce1807f5f30e8995d482N
-
Size
96KB
-
MD5
6794f34c065286bcd2b86a2a59a58d10
-
SHA1
9bf13f9ea6051150912e9013ff5aa9008a656635
-
SHA256
398393edaac73ad62615a5e9ff13e9a77075ed206356ce1807f5f30e8995d482
-
SHA512
3b83bcfc8181f4811d4a658e6ce77e710708a0fbcce35677a0f512763df445cf6d551e557f612afb032f8420a36e8677978b5b845e3b8b3493e23dee33f78ffa
-
SSDEEP
1536:OydUePyXJfZHb3Rh9+pQkHbs2u4/rsgjsRGGQdojnmyXwBDJx:2JfZHNOQkHbqOrsQswGQdojnm1BJx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 398393edaac73ad62615a5e9ff13e9a77075ed206356ce1807f5f30e8995d482N
Files
-
398393edaac73ad62615a5e9ff13e9a77075ed206356ce1807f5f30e8995d482N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.FFF Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE