Static task
static1
Behavioral task
behavioral1
Sample
c86600d079360cfcb71e01652236a25c4839d66ca878c13f0a248559c0b0dc03.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c86600d079360cfcb71e01652236a25c4839d66ca878c13f0a248559c0b0dc03.exe
Resource
win10v2004-20241007-en
General
-
Target
c86600d079360cfcb71e01652236a25c4839d66ca878c13f0a248559c0b0dc03
-
Size
1.5MB
-
MD5
1b5fd76a63c452bdde2c14579a39fa30
-
SHA1
3ee5eab674c0020cdbeb1ee2955978f1001431b2
-
SHA256
c86600d079360cfcb71e01652236a25c4839d66ca878c13f0a248559c0b0dc03
-
SHA512
4440642319ad2c984cdc19bff77bb0b753e822f85cd47a056a26ddf973a5bc6f9397655499ce812751015b37c50076988cf0e2623554fb9e519438bf07179a39
-
SSDEEP
24576:4680/clPfes/Mk1tY+GCmB8Qy3WsGKey+aT:46teJQMNH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c86600d079360cfcb71e01652236a25c4839d66ca878c13f0a248559c0b0dc03
Files
-
c86600d079360cfcb71e01652236a25c4839d66ca878c13f0a248559c0b0dc03.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 381KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ