Static task
static1
Behavioral task
behavioral1
Sample
31751230012c8138183f106edd27e0d77a7d151d7a01c14234102c5edd3f3a78.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
31751230012c8138183f106edd27e0d77a7d151d7a01c14234102c5edd3f3a78.exe
Resource
win10v2004-20241007-en
General
-
Target
31751230012c8138183f106edd27e0d77a7d151d7a01c14234102c5edd3f3a78
-
Size
4.5MB
-
MD5
6f652b8ad678ea13ecd83cbf499df119
-
SHA1
24203d311eafc21eced7b081f1db46bba6a1220e
-
SHA256
31751230012c8138183f106edd27e0d77a7d151d7a01c14234102c5edd3f3a78
-
SHA512
f4a37e5fb80a21fe3c0ff11919295e8c81252890b5d016f7023bec1e2a71f52f16e06453530f844a85d6ffb843208ba55ed2537b9f957d1c18cf37e55c4599bc
-
SSDEEP
49152:9AJ1eDlZNGh3CKP/Xm0j9AmW9X5TVW33F6QpD+9mCL3MWC8YPgs+C0CezNdJOXea:WA70XBj3ukH3sNq8YPgggJGLC1XxvVRA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31751230012c8138183f106edd27e0d77a7d151d7a01c14234102c5edd3f3a78
Files
-
31751230012c8138183f106edd27e0d77a7d151d7a01c14234102c5edd3f3a78.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE