Static task
static1
Behavioral task
behavioral1
Sample
1AF734AF3455F97C50B96A0923746F91.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1AF734AF3455F97C50B96A0923746F91.exe
Resource
win10v2004-20230703-en
General
-
Target
1AF734AF3455F97C50B96A0923746F91.exe
-
Size
871KB
-
MD5
1af734af3455f97c50b96a0923746f91
-
SHA1
1a060d2eef96f38ef7d0d654afab7ebefc358f77
-
SHA256
90399d618bfbcf4d3adf3abebad223be29ef4a310b486d7f7e5b8bc3b2a00416
-
SHA512
b952f6829bdaefb55972a3a9cb3c624422a898c438ade32a6d4f475a39bc92a1d0c0f099983c078557b02b35675021631fb9603484be151c17aa23dea22ee0a3
-
SSDEEP
12288:VDQy2c+bp9/95hiFFCt2AvQBPNIkry/wNQZqLfLYUj2MsV2AWwog:Vcnbp9mIzvQBa1/wNQULfLYUyVVHjo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1AF734AF3455F97C50B96A0923746F91.exe
Files
-
1AF734AF3455F97C50B96A0923746F91.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 439KB - Virtual size: 439KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 357KB - Virtual size: 357KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 9KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ