Static task
static1
Behavioral task
behavioral1
Sample
1b200c01e17311404115258ca67caecf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b200c01e17311404115258ca67caecf.exe
Resource
win10v2004-20231215-en
General
-
Target
1b200c01e17311404115258ca67caecf
-
Size
22KB
-
MD5
1b200c01e17311404115258ca67caecf
-
SHA1
10380d4730b01ed2cb3136d7903254baef2538fb
-
SHA256
cb693384ef371bd3ae3e7cf33ed716198e3721e15f855a7c79d276131e2210d6
-
SHA512
9ec1e9c8280d99d0decbb3dcc6fed07609291c61a7819c177e381c5e674485bfb2e1c4dcecebd0286dcf1a57f78ab32178c168c8482a13815047f4aa4e120619
-
SSDEEP
384:0TZoW6EXn7k+DQF108KYu06GlGeVRAVDQmN6Pzi7TbHAMrw8VcfvIruw0E:0iWFrknv08KClGeVReDQmN8u7XtjVcfK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b200c01e17311404115258ca67caecf
Files
-
1b200c01e17311404115258ca67caecf.exe windows:4 windows x86 arch:x86
a56f115ee5ef2625bd949acaeec66b76
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
Sections
.text Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 90B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE