Static task
static1
Behavioral task
behavioral1
Sample
1cf0cf8e6d22af474b32f4a57a0d260e.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
1cf0cf8e6d22af474b32f4a57a0d260e.exe
Resource
win10v2004-20231215-en
General
-
Target
1cf0cf8e6d22af474b32f4a57a0d260e
-
Size
474KB
-
MD5
1cf0cf8e6d22af474b32f4a57a0d260e
-
SHA1
e498de18f08895a33e90376d72c528a51bcebc80
-
SHA256
07bc6151819503e15ce1d29ee9273917c09b130589fe71782b997f125c5e15dc
-
SHA512
4ff630af4828682d47dafcf60b37c96aef26964f209e13a11ae8611236a22a0946727a156926da0be787b3f1c5de2d620d466be09d5f8c0deffcd5fdb020ea6d
-
SSDEEP
6144:7dspDeDrxkg/vrMuJIgwhEFHyOrJcX/Pgqwzm5IzkWjS4e4azExBKO1t4Kb70NqZ:58kxNhOZElO5kkWjhD4A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1cf0cf8e6d22af474b32f4a57a0d260e
Files
-
1cf0cf8e6d22af474b32f4a57a0d260e.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.MPRESS1 Size: 434KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE