Static task
static1
Behavioral task
behavioral1
Sample
c2358812035291974a13c9e6701277da125d684ad854f01b54d4370511d06efe.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c2358812035291974a13c9e6701277da125d684ad854f01b54d4370511d06efe.exe
Resource
win10v2004-20241007-en
General
-
Target
c2358812035291974a13c9e6701277da125d684ad854f01b54d4370511d06efe
-
Size
893KB
-
MD5
fdee6b90a738615831097750ff09483d
-
SHA1
141f623cfdfeafd6c2ea983fee004390021f62f6
-
SHA256
c2358812035291974a13c9e6701277da125d684ad854f01b54d4370511d06efe
-
SHA512
c7a3bce1c9a6d72a4c9b1928e319b7ef6fae78904f3c7ce9bbbd43b50b87b5902b01e8c298eadefcb41c13b2475e4a4dd288bce89c187425832a356316a0212b
-
SSDEEP
6144:qvG+lkob7nc5ehzXjOYpui6yYPaIGckpyWO63t5YNpui6yYPaIGckhNR0tHK:bS7n0CzXjOYpV6yYPI3cpV6yYPOR00
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource c2358812035291974a13c9e6701277da125d684ad854f01b54d4370511d06efe
Files
-
c2358812035291974a13c9e6701277da125d684ad854f01b54d4370511d06efe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ