Static task
static1
Behavioral task
behavioral1
Sample
1da9958628698a1abd4d637a6559cb9e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1da9958628698a1abd4d637a6559cb9e.exe
Resource
win10v2004-20231215-en
General
-
Target
1da9958628698a1abd4d637a6559cb9e
-
Size
658KB
-
MD5
1da9958628698a1abd4d637a6559cb9e
-
SHA1
bc94357741ea9eec3ef27600c90a68653256224f
-
SHA256
77e2083dd99754677c46b05b05837f368c69514f011f225569470400597373e7
-
SHA512
61a65e6f674990255fc44590ad67b063856722e0cbe130a3f5b35b32dc0194e1b88a6aa9268e9eaf220c73d6278361131216885b6f0574e5a13cade114622920
-
SSDEEP
12288:8WrFBMuIZ5yWY8Jq+iJHx1RsHV6bb/YF3Z4mxxJ7sIcOa/Y91TVKv:LrFBMJF5JPiJRA16oQmXRsINwrv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1da9958628698a1abd4d637a6559cb9e
Files
-
1da9958628698a1abd4d637a6559cb9e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 2KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 340KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE