Static task
static1
Behavioral task
behavioral1
Sample
1956d1d331e92a878e76eab0a4b71feb.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
1956d1d331e92a878e76eab0a4b71feb.exe
Resource
win10v2004-20231201-en
General
-
Target
1956d1d331e92a878e76eab0a4b71feb
-
Size
9KB
-
MD5
1956d1d331e92a878e76eab0a4b71feb
-
SHA1
b85fcde42d65a2f04f14967a6ff2f7cc70bb0213
-
SHA256
6de9b27d234735588bbd99d680b4de4518e3a63fd310de1ff37ed8ee10ee48cb
-
SHA512
086a203ffad40750d24e0b45833d8ab0e366cf8e3fc002831865b5ad0b938f34fdc47e3fe0fee60ce003f6f5eb4440e1afeeec9e3d57a6a812d68936a999ffd0
-
SSDEEP
192:3Bksuz9MuIGgeMZZ3u93VnjdwqzW3Ce3Qynn:glTgeMyFnhwqCSej
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1956d1d331e92a878e76eab0a4b71feb
Files
-
1956d1d331e92a878e76eab0a4b71feb.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ