Static task
static1
Behavioral task
behavioral1
Sample
1efc12d982eb4789b4d70b2dc3d4af10d34d7c14d9997d08724634d9f16d3438.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1efc12d982eb4789b4d70b2dc3d4af10d34d7c14d9997d08724634d9f16d3438.exe
Resource
win10v2004-20230915-en
General
-
Target
1efc12d982eb4789b4d70b2dc3d4af10d34d7c14d9997d08724634d9f16d3438
-
Size
421KB
-
MD5
bcdcd7fe5cef216942b9b4f7d712b356
-
SHA1
d86f2e49d9a8274191540294d34b1033a75deacc
-
SHA256
1efc12d982eb4789b4d70b2dc3d4af10d34d7c14d9997d08724634d9f16d3438
-
SHA512
dfb4254eb20ec4665129da54c0560257fc5bbdfee7a5872203e8cf9428936cf7ec41b17f1b488a0e0f5be4c20d20f6f721fdd5fe9ee9d698b818f8f6a36706ea
-
SSDEEP
6144:ELG1Y/OT4Vfhguy56iC5/7Z7mEGiin0u9HJAxdrt10xdUy95WkLmzdWsQELvLf8v:xG/tJguplGp0Bk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1efc12d982eb4789b4d70b2dc3d4af10d34d7c14d9997d08724634d9f16d3438
Files
-
1efc12d982eb4789b4d70b2dc3d4af10d34d7c14d9997d08724634d9f16d3438.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.Upack Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE