Static task
static1
Behavioral task
behavioral1
Sample
11b38d1b99f9692acf823184dc7268f1bc24441d53627a9fb56576756f996d19.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
11b38d1b99f9692acf823184dc7268f1bc24441d53627a9fb56576756f996d19.exe
Resource
win10v2004-20230915-en
General
-
Target
11b38d1b99f9692acf823184dc7268f1bc24441d53627a9fb56576756f996d19
-
Size
3.1MB
-
MD5
0aa5e3a76eae1b3bba73a2291ebf1706
-
SHA1
15d289274abae11d312f6854556a9cf54dcb3f35
-
SHA256
11b38d1b99f9692acf823184dc7268f1bc24441d53627a9fb56576756f996d19
-
SHA512
2f2e374e71a99f6b86f56cdd166e0e79ba122fda0f6e10b3f670c8d000227ac5b3ba78ff4598214b5d41d9f2fe037c0732e1e6b7d159b25f5f6fba1efd77c9c8
-
SSDEEP
98304:9DQNTFeD0RYGiS/c7Qg11058bzYVM5nG0jFWha:9DcTs0RFiIc0M05yYapFqa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11b38d1b99f9692acf823184dc7268f1bc24441d53627a9fb56576756f996d19
Files
-
11b38d1b99f9692acf823184dc7268f1bc24441d53627a9fb56576756f996d19.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1.7MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 225KB - Virtual size: 936KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 186KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 962KB - Virtual size: 964KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE