Static task
static1
Behavioral task
behavioral1
Sample
ff0ce1ab69cc04d0b7d1f56f49c94d70e9c732d1810cb50c11eaa78e41970dee.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff0ce1ab69cc04d0b7d1f56f49c94d70e9c732d1810cb50c11eaa78e41970dee.exe
Resource
win10v2004-20241007-en
General
-
Target
ff0ce1ab69cc04d0b7d1f56f49c94d70e9c732d1810cb50c11eaa78e41970dee
-
Size
308KB
-
MD5
2296fabc5824f70cd4c73840922b3c43
-
SHA1
2443831cf7373abae0930c6e8029fd9f866db6f9
-
SHA256
ff0ce1ab69cc04d0b7d1f56f49c94d70e9c732d1810cb50c11eaa78e41970dee
-
SHA512
4e1b03db79a2c685c81341cd35070c9133c4b9a401c8335d3b49bcd10978c90e13c2d729569137876ecc21d7e0bea185f4e60f923b541948f63cc5bf121f294f
-
SSDEEP
6144:zJFzjKA8e+966JhHQpCV9oSHzDKx5koxOWv38kkqEbAO0w:zJFKZJJQpCrBDG5lxpvqb3d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff0ce1ab69cc04d0b7d1f56f49c94d70e9c732d1810cb50c11eaa78e41970dee
Files
-
ff0ce1ab69cc04d0b7d1f56f49c94d70e9c732d1810cb50c11eaa78e41970dee.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ