Static task
static1
Behavioral task
behavioral1
Sample
f1fe8ed0428fd6b3652e94ff7aa2f7a535dfbf301f56a09ec518d422a814957e.exe
Resource
win10-20231129-en
General
-
Target
f1fe8ed0428fd6b3652e94ff7aa2f7a535dfbf301f56a09ec518d422a814957e
-
Size
7.5MB
-
MD5
bdee621810ab6ac4c9f296c57e4ebb37
-
SHA1
b23327924358c2f5eea0c1fd9c28300dcf77f0ba
-
SHA256
f1fe8ed0428fd6b3652e94ff7aa2f7a535dfbf301f56a09ec518d422a814957e
-
SHA512
9d147cd03b1e3c3d83f740b21b1fb11c828571fd96df476297324a962fdf789dcedc535f6edf81a6b6b175d6b0c9d2ecac0be9bfef39e33842ba6627112fee5e
-
SSDEEP
196608:NpVDDR8SZqepbLqwjKpDf/NIpEpDqfBrT0/WViLFfzj:NpVBtvpbL/+vVYBrTTefzj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1fe8ed0428fd6b3652e94ff7aa2f7a535dfbf301f56a09ec518d422a814957e
Files
-
f1fe8ed0428fd6b3652e94ff7aa2f7a535dfbf301f56a09ec518d422a814957e.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ