Static task
static1
Behavioral task
behavioral1
Sample
17314ecc454c17a148ffc9760e5eac64.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
17314ecc454c17a148ffc9760e5eac64.exe
Resource
win10v2004-20231215-en
General
-
Target
17314ecc454c17a148ffc9760e5eac64
-
Size
16KB
-
MD5
17314ecc454c17a148ffc9760e5eac64
-
SHA1
d11e46d7902c399675ab5715436c1625c3242580
-
SHA256
e46d7a930499d79e0a11db59e6f293acad6d7877621f3fed4a3a56569a9f41fa
-
SHA512
0d675bedb2160c28f8062a33fbdbb15a947659d9782432a989299836ad02cd6a1213373e10500660cbf97e736952d86a4f78febc7fcb88fb7dd7df47b4b9b273
-
SSDEEP
384:nZJA/lWpg/HakwtjRE9Ykrpd2f8ciKZ1mboJ4Dh:n44QahpRWYEmf8chZ1mboSDh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17314ecc454c17a148ffc9760e5eac64
Files
-
17314ecc454c17a148ffc9760e5eac64.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ