Static task
static1
Behavioral task
behavioral1
Sample
1f9359d524504fb6f8fdef26c7781795f578fbc28d2a6857928f1de06325d7da.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1f9359d524504fb6f8fdef26c7781795f578fbc28d2a6857928f1de06325d7da.exe
Resource
win10v2004-20230915-en
General
-
Target
1f9359d524504fb6f8fdef26c7781795f578fbc28d2a6857928f1de06325d7da
-
Size
3.9MB
-
MD5
b2e335d7835312304150a772b4458c84
-
SHA1
3699d7c0c89ab3899956ae6be66baca4130a6f4f
-
SHA256
1f9359d524504fb6f8fdef26c7781795f578fbc28d2a6857928f1de06325d7da
-
SHA512
f5265f04b7411b2c96a3a71492159c6e85b1f9c00ddac0c28e58631812148b65209e917b36585296a9614faad492ea5de2b970dd387b252125a306938280fe0b
-
SSDEEP
49152:6vlanL17PmGGDFYTW6dlHQWCBFSx+2i6+AAMDPGgUhGxfmsk9T6kgTvcldlmf2Ot:6a9PmGe2KBFSo2tZmP9ukgYs3otdw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f9359d524504fb6f8fdef26c7781795f578fbc28d2a6857928f1de06325d7da
Files
-
1f9359d524504fb6f8fdef26c7781795f578fbc28d2a6857928f1de06325d7da.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE