Static task
static1
Behavioral task
behavioral1
Sample
1d9af8eb012ffbcc8b3e5d3fdfd8cf725158c1506a17484213f4ad4e3b0afb06.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1d9af8eb012ffbcc8b3e5d3fdfd8cf725158c1506a17484213f4ad4e3b0afb06.exe
Resource
win10v2004-20230220-en
General
-
Target
1d9af8eb012ffbcc8b3e5d3fdfd8cf725158c1506a17484213f4ad4e3b0afb06
-
Size
4.2MB
-
MD5
5932ffe0944b51535cb247d502b1dc0e
-
SHA1
07516a8e4fc212903dd323f54be1878be2d7ef13
-
SHA256
1d9af8eb012ffbcc8b3e5d3fdfd8cf725158c1506a17484213f4ad4e3b0afb06
-
SHA512
a67de5cb985888017387d7db9eeaea7f9021f4e67972f00011b06c5825fce538e0d75bdf3b3a8ff0fa6322543aeac97b3e879958158bdf99eb7144a97a99afd6
-
SSDEEP
24576:TzUkLuiRK+PCeV8G/ImhX3095Pto1cF0T3W0UX9QKvGx+5v+WDtz9J2MGUus8p8/:PUkLrrVjthX4KfGxvTNGUu9+d1cLzhIb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d9af8eb012ffbcc8b3e5d3fdfd8cf725158c1506a17484213f4ad4e3b0afb06
Files
-
1d9af8eb012ffbcc8b3e5d3fdfd8cf725158c1506a17484213f4ad4e3b0afb06.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 299KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 562KB - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 94KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 349KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE