Static task
static1
Behavioral task
behavioral1
Sample
1198541d86583dbe1ae546d1a71e98f2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1198541d86583dbe1ae546d1a71e98f2.exe
Resource
win10v2004-20231215-en
General
-
Target
1198541d86583dbe1ae546d1a71e98f2
-
Size
410KB
-
MD5
1198541d86583dbe1ae546d1a71e98f2
-
SHA1
093ce1f506a94dfab863f42622276739aa4e988c
-
SHA256
ccb869a9f2eb7c488bbf453c6b8b7548775d1abe154f3068420216e70ef203c5
-
SHA512
bcd9ca7a5aabe76bba9231bd78e4623d98390dbbf628b78a749604f02d4b66d4b81e15974a29db33570a141765258ef3bb7d32564d1f92806d36540bb1c2e1d6
-
SSDEEP
6144:hOBqc6knnSFV54dKHRPmGvys6nkZDWrYhOlOtplrUgHKyPX+27gJ4T8ijcelgAB3:u3nSFVE8RPmcZr1FrHKUv+xijcelTBCQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1198541d86583dbe1ae546d1a71e98f2
Files
-
1198541d86583dbe1ae546d1a71e98f2.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.khe Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE