Static task
static1
Behavioral task
behavioral1
Sample
1b5c00151d320aca583d8cc4148dc1582a71de0f45a269fa28389a99a266c965.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1b5c00151d320aca583d8cc4148dc1582a71de0f45a269fa28389a99a266c965.exe
Resource
win10v2004-20230915-en
General
-
Target
1b5c00151d320aca583d8cc4148dc1582a71de0f45a269fa28389a99a266c965
-
Size
1.6MB
-
MD5
70e091f34bf2ffdc8733090269e415fe
-
SHA1
5622516ae6cefb9524f933e2058e8d30b73d5ffe
-
SHA256
1b5c00151d320aca583d8cc4148dc1582a71de0f45a269fa28389a99a266c965
-
SHA512
6504c7bce9e8335561fff0b93a1b32a361e22aff15c6b1cec03bccd3310d2e996ba6e8302e5d6ab0e72e3ad56b0dc3d3bcfa5fc623000fba0990d3da15ac10b2
-
SSDEEP
49152:/3TFSMldHj0kMpBAgUy7lxxzdw/WrAbk9c:RLj4kMn5xxzHAbkq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b5c00151d320aca583d8cc4148dc1582a71de0f45a269fa28389a99a266c965
Files
-
1b5c00151d320aca583d8cc4148dc1582a71de0f45a269fa28389a99a266c965.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.58720 Size: - Virtual size: 568KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.58721 Size: - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 571KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
89vgs Size: 383KB - Virtual size: 384KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
89vgs Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
89vgs Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ