Static task
static1
Behavioral task
behavioral1
Sample
1f9d1b268f67bc64c145ba149a9b0ecbce8e08d3d8149732b77022278089f97d.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1f9d1b268f67bc64c145ba149a9b0ecbce8e08d3d8149732b77022278089f97d.exe
Resource
win10v2004-20230220-en
General
-
Target
1f9d1b268f67bc64c145ba149a9b0ecbce8e08d3d8149732b77022278089f97d
-
Size
819KB
-
MD5
3e228a5e2511f4337cb453da1f7aa029
-
SHA1
8f15b8016c6c11f01d5e256561d9a95807800195
-
SHA256
1f9d1b268f67bc64c145ba149a9b0ecbce8e08d3d8149732b77022278089f97d
-
SHA512
dffad996d3be928b344e89558e9ebde9406cbfbe77cc6e4d4fcc232e7e92a08dad83f86b9280efdb914e8482ef1adfa83fe38630859d0a995ae2a935e81fdfb5
-
SSDEEP
12288:UsFbsfI8Z1gMFVobi/WS/DTOTH1D/4OP5s1C7H06uwx1Rfv2Nl58PXOdOgd:U0bsfI6dFqbI7s1DrP5q6uwlnG3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f9d1b268f67bc64c145ba149a9b0ecbce8e08d3d8149732b77022278089f97d
Files
-
1f9d1b268f67bc64c145ba149a9b0ecbce8e08d3d8149732b77022278089f97d.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 816KB - Virtual size: 815KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ