Static task
static1
Behavioral task
behavioral1
Sample
0fa162e8ad5c4e69952936645805b7a97b81b175d4deb8c39827aaa986935d38N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0fa162e8ad5c4e69952936645805b7a97b81b175d4deb8c39827aaa986935d38N.exe
Resource
win10v2004-20241007-en
General
-
Target
0fa162e8ad5c4e69952936645805b7a97b81b175d4deb8c39827aaa986935d38N.exe
-
Size
383KB
-
MD5
daeabca2e8a79f8ac056980d1bfe12a0
-
SHA1
bf8d983ff7ae16e1198b8398592a6c02234b6f44
-
SHA256
0fa162e8ad5c4e69952936645805b7a97b81b175d4deb8c39827aaa986935d38
-
SHA512
da2d66abdff15f51fb2bffed3b506dab59180f96cbb5654706097d7c813bb5c67a47a484455055e299565ae1754dd2eeee148db60ef754dae7bc7b559b98a560
-
SSDEEP
6144:XIeorq0EgULOUtN4ANcBebcaLRf2/IRXhYneKxRwP5bZs3qXWH/IVqfHGF:X2qgUZUebcMfFlhbKxRwBbZs3P/II/k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fa162e8ad5c4e69952936645805b7a97b81b175d4deb8c39827aaa986935d38N.exe
Files
-
0fa162e8ad5c4e69952936645805b7a97b81b175d4deb8c39827aaa986935d38N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ