Static task
static1
Behavioral task
behavioral1
Sample
1063fd049430e141eeb700ec8f25ccbc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1063fd049430e141eeb700ec8f25ccbc.exe
Resource
win10v2004-20231215-en
General
-
Target
1063fd049430e141eeb700ec8f25ccbc
-
Size
4.0MB
-
MD5
1063fd049430e141eeb700ec8f25ccbc
-
SHA1
b3a76308403afdccf3c17d2686179e04f9b498d3
-
SHA256
003178546a455522bb876012b04885e285bdb71f4483b7449a3ebfda69583ea4
-
SHA512
e99614430131e42f344e1557c9f38631568b3e136e1eda66917e3787b06e51be91dae2db929ad8182ee14e0615e4e1d382f7e859381ee739e3b25647b426f463
-
SSDEEP
49152:eosNBk9/fw2BwfmM0f4DtoZrDkYOMwwnMb4PmyVeymUi6AjW/MUSdGRf3/:eosNi9Xwgwfo3qYOXwnS4rVerjxAZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1063fd049430e141eeb700ec8f25ccbc
Files
-
1063fd049430e141eeb700ec8f25ccbc.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c2r Size: 512B - Virtual size: 360B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ