Static task
static1
Behavioral task
behavioral1
Sample
11b7163b944b1c9ac5d35d79a5f7c188.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
11b7163b944b1c9ac5d35d79a5f7c188.exe
Resource
win10v2004-20231222-en
General
-
Target
11b7163b944b1c9ac5d35d79a5f7c188
-
Size
17KB
-
MD5
11b7163b944b1c9ac5d35d79a5f7c188
-
SHA1
7763fb6dba6173f6d63ab3ec1d4b7a58ac3abe4f
-
SHA256
7b95efd799780d4dcf50e29421f25aec69e078a7724a73a53fd2fa5147279d38
-
SHA512
2baa8a3869602d1c5f62844336b844755270caaa92f13f044c177e67a512758ebb1ae9acb8c7e597defc843d3dba82ec3fb3b8e539f5c1c3faad330b7f84d641
-
SSDEEP
384:TL2vDThiRtMx8WIXizz3YZaJXyXqFYJDV:v2BiRtU5IXivIwJHU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11b7163b944b1c9ac5d35d79a5f7c188
Files
-
11b7163b944b1c9ac5d35d79a5f7c188.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE