Static task
static1
Behavioral task
behavioral1
Sample
1b8e95459c0fe19c5eb9e03964548a04413783b4b844001265c6378f102b5521.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1b8e95459c0fe19c5eb9e03964548a04413783b4b844001265c6378f102b5521.exe
Resource
win10v2004-20230220-en
General
-
Target
1b8e95459c0fe19c5eb9e03964548a04413783b4b844001265c6378f102b5521
-
Size
2.0MB
-
MD5
ef128573d765d569f81ff2729208c175
-
SHA1
3931e83e4b56841e69b30da1dbd1ce02871385d5
-
SHA256
1b8e95459c0fe19c5eb9e03964548a04413783b4b844001265c6378f102b5521
-
SHA512
6a85c1f3d0a0fa6f53cd5ef6f7ff291623d48d8eba23753af8db88434dcd7ec994dce2080513825cc4146a526fe65ed8171651315e0d2449e888e6d08dbcec08
-
SSDEEP
24576:YBZ/ve+aiBDQW4UdmQzv6qjPQycHe2sTyZpJBWF3RtWEpEreWoUi21cfm:YBZne+alq7QycHkyISproFf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b8e95459c0fe19c5eb9e03964548a04413783b4b844001265c6378f102b5521
Files
-
1b8e95459c0fe19c5eb9e03964548a04413783b4b844001265c6378f102b5521.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 824KB - Virtual size: 821KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 940KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 212KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ