Static task
static1
Behavioral task
behavioral1
Sample
ffff.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ffff.exe
Resource
win10v2004-20241007-en
General
-
Target
ffff.exe
-
Size
13KB
-
MD5
a441e40fb514d694749fc5b61af5ca91
-
SHA1
63a70ac55fcfa210fbc30ee104be29a037f691d2
-
SHA256
b7e03030f50714f574f595bf9d92ab5b3179bb6b617e658db88f0e8c7d05989b
-
SHA512
c5f5d3eae4ac85955c13e91fdf19f3438c56aaaf77470413428180f4fff2c865128c24d0281acbcbb0ef281db299189c99b9d39ff68105c444452a766e654188
-
SSDEEP
192:vBAlEMZWAY5nCtCY61l40CMvPSohzWLz5xWfgOQ/muu/d5THm4Ot4O:JAnLAXNy/m3/bTK4O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffff.exe
Files
-
ffff.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE