Static task
static1
Behavioral task
behavioral1
Sample
ff35564f5d1d58a51c229035e354767a4d402a083c225daeb98cbb70707ff3c7N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ff35564f5d1d58a51c229035e354767a4d402a083c225daeb98cbb70707ff3c7N.exe
Resource
win10v2004-20241007-en
General
-
Target
ff35564f5d1d58a51c229035e354767a4d402a083c225daeb98cbb70707ff3c7N.exe
-
Size
3.4MB
-
MD5
958bb423bf135d00ef906c9144ce20b0
-
SHA1
3bd3b9a5d1894134f32bff19264334c66d0e6326
-
SHA256
ff35564f5d1d58a51c229035e354767a4d402a083c225daeb98cbb70707ff3c7
-
SHA512
871bb67d118ff3608e84d5b3c3fed3b4803b0b750f5284dc3249d492ff1d14cc44002ff8ea2b8b7e35208ac761cc74583dcc2a159ce20f05ac4a39932b0ada79
-
SSDEEP
49152:8S77LDG6z6Ltt103RZwBU3lsSRsj0Zuur1T75YbU5rmNtqL0LnG+v98+:8qrG6zCtY3/dSdJg1BrmNtIl+/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff35564f5d1d58a51c229035e354767a4d402a083c225daeb98cbb70707ff3c7N.exe
Files
-
ff35564f5d1d58a51c229035e354767a4d402a083c225daeb98cbb70707ff3c7N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 787KB - Virtual size: 787KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 152KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 276B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 122KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 839KB - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ