Static task
static1
Behavioral task
behavioral1
Sample
1f570c4a84def50f70c4505b6f7ecec8dc14bbb8a6517749a901c63048dfee99.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1f570c4a84def50f70c4505b6f7ecec8dc14bbb8a6517749a901c63048dfee99.exe
Resource
win10-20231215-en
General
-
Target
1f570c4a84def50f70c4505b6f7ecec8dc14bbb8a6517749a901c63048dfee99
-
Size
323KB
-
MD5
d790a919758ac20f6733ff419f5c9273
-
SHA1
7e81dc3ec43bb25dcd2a193907f5edb879e103d2
-
SHA256
1f570c4a84def50f70c4505b6f7ecec8dc14bbb8a6517749a901c63048dfee99
-
SHA512
7fe99230f0c602d11baabae1615203b537eda40230fca36d49839d97a20f0bac4b12003ce05890687b0543caca34df11e9509df02fb5d2d7e0ab52274621af1f
-
SSDEEP
6144:eKlzr1sYCzek2ciDaP9Xk6Ln1W8W/9InBSkZZmLdGcAdgdY6RKpjS:eGhQ2ciDq9ZL1W8q9InBRqELdolRKpj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f570c4a84def50f70c4505b6f7ecec8dc14bbb8a6517749a901c63048dfee99
Files
-
1f570c4a84def50f70c4505b6f7ecec8dc14bbb8a6517749a901c63048dfee99.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 319KB - Virtual size: 318KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 684B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ