Static task
static1
Behavioral task
behavioral1
Sample
1c2693e2121f04a66b4b40782b58698a611a69f979f9c07bb08a0950acde15d6.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1c2693e2121f04a66b4b40782b58698a611a69f979f9c07bb08a0950acde15d6.exe
Resource
win10v2004-20230915-en
General
-
Target
1c2693e2121f04a66b4b40782b58698a611a69f979f9c07bb08a0950acde15d6
-
Size
3.9MB
-
MD5
413f09b9c11b5d2011fb27629baab558
-
SHA1
af9379675d7578658a451eed078308a0cc8447fd
-
SHA256
1c2693e2121f04a66b4b40782b58698a611a69f979f9c07bb08a0950acde15d6
-
SHA512
8e948d37a06ac6e3f01ad5b8fb8206134c239770d5fbe957dc6ed52c03f838d4b27fd0f7857cc1cf1cbb08d8d7bde1cdab8bd7bc0a93870a05dcea66c5baff46
-
SSDEEP
49152:6vlanL17PmGGDFYTW6dlHQWCBFSx+2i6+AAMDPGgUhGxfmsk9T6kgTvcldlmf2Ok:6a9PmGe2KBFSo2tZmP9ukgYs3otd3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c2693e2121f04a66b4b40782b58698a611a69f979f9c07bb08a0950acde15d6
Files
-
1c2693e2121f04a66b4b40782b58698a611a69f979f9c07bb08a0950acde15d6.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE