Static task
static1
Behavioral task
behavioral1
Sample
293b59a290601d81e0ffdf3f141034997b38f00d0eebd1b6866148940b2ef727N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
293b59a290601d81e0ffdf3f141034997b38f00d0eebd1b6866148940b2ef727N.exe
Resource
win10v2004-20241007-en
General
-
Target
293b59a290601d81e0ffdf3f141034997b38f00d0eebd1b6866148940b2ef727N
-
Size
320KB
-
MD5
0e5d475a9af0c981852c21627644d180
-
SHA1
a7ee8ca61b6c0c9e96200b5886a850ed88ccf679
-
SHA256
293b59a290601d81e0ffdf3f141034997b38f00d0eebd1b6866148940b2ef727
-
SHA512
afd9b51e87334e84efbc29caca32be94231d063ca3ba34576efd846be7ed754da48877091bd266db1aecc5f63b54b3953af018d49acfa4b8ca1e722cc1069e44
-
SSDEEP
6144:F8PvlOY/m05XUEtMEX6vluZV4U/vlf0DrBqvl8ZV4U/vlfl+9Q:qPvDm05XEvG6IveDVqvQ6IvP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 293b59a290601d81e0ffdf3f141034997b38f00d0eebd1b6866148940b2ef727N
Files
-
293b59a290601d81e0ffdf3f141034997b38f00d0eebd1b6866148940b2ef727N.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jfbbql Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ