Static task
static1
Behavioral task
behavioral1
Sample
11e719a65aac20a335859f1b319155de.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11e719a65aac20a335859f1b319155de.exe
Resource
win10v2004-20231215-en
General
-
Target
11e719a65aac20a335859f1b319155de
-
Size
1024KB
-
MD5
11e719a65aac20a335859f1b319155de
-
SHA1
11a23c8e822d69d77a84058d5320cdc7a94c5872
-
SHA256
d6c9158e793dd83c6c09ba81aaad397c386758ab476f73dc3ba2ff53268fd8d8
-
SHA512
b50d03e39ef8d9c1beeb4a7ed107ca621b5ea99c454379692a55a44e4b3f23be3280744c63b84b7e81d553cd04148b7398a594b345a64fafaeacfc32c4cf5cc0
-
SSDEEP
12288:hJ8MkfeLl4kxUi4JX+6EJqc/UYiCAF4b8fPVAvbEnq5DNAt/qIwOoME8hqaahe/O:h9kGRQi4xDSdDMeEnqfAtqIRv2e/Pm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11e719a65aac20a335859f1b319155de
Files
-
11e719a65aac20a335859f1b319155de.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE