Static task
static1
Behavioral task
behavioral1
Sample
2968f76ad1341d5a2dd83f3d2f286e12fa83c44cf3707c5c841390c6875e026dN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2968f76ad1341d5a2dd83f3d2f286e12fa83c44cf3707c5c841390c6875e026dN.exe
Resource
win10v2004-20241007-en
General
-
Target
2968f76ad1341d5a2dd83f3d2f286e12fa83c44cf3707c5c841390c6875e026dN
-
Size
168KB
-
MD5
256273bfc9f3ef0a8f596dd4740d3150
-
SHA1
09a082e30c328e0c5208e8ca8514647ae99b0887
-
SHA256
2968f76ad1341d5a2dd83f3d2f286e12fa83c44cf3707c5c841390c6875e026d
-
SHA512
01d9a331977605313925b204132caacc7b9a5454aba4417fea548a0533dfd1a8b2202e454292ed0958d97f4ef5bd36f4a463beb2acc6f405af54cee1a0e6bf08
-
SSDEEP
3072:8ncm5H0Lh1vOfByEpFwpDuJ8mF9YNTyr4p9t4W987u1j5FaoJ5pFwr:LIs1EBymFwpo8mFCNkq9tr987u1dFVr0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2968f76ad1341d5a2dd83f3d2f286e12fa83c44cf3707c5c841390c6875e026dN
Files
-
2968f76ad1341d5a2dd83f3d2f286e12fa83c44cf3707c5c841390c6875e026dN.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ