Static task
static1
Behavioral task
behavioral1
Sample
1da8df79fb5ac200ad2ba044e4e5a1a4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1da8df79fb5ac200ad2ba044e4e5a1a4.exe
Resource
win10v2004-20231215-en
General
-
Target
1da8df79fb5ac200ad2ba044e4e5a1a4
-
Size
721KB
-
MD5
1da8df79fb5ac200ad2ba044e4e5a1a4
-
SHA1
4cf7eeaf6df5ebf4d3003968c882f91f3d11f918
-
SHA256
767b17e15bba650e6d7a2387a457592ae75dbe8831fa882aba7d4548fe1b4ed2
-
SHA512
861ab2594969aa876d0e307cadcd558380b2fed22bd939bd0dad083e9687c1143bfec5015ef22e7af74c0856e23064d3d72dd383a76660cca1c1c11814829f12
-
SSDEEP
12288:6j7Gdvw+ukEEAH9N28aMuL/mTAwPOz61JPW9jCEUCBMHWGZH0BSv0:e7GdYcEEAuL/m8MGGJPiCsMHWGmS0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1da8df79fb5ac200ad2ba044e4e5a1a4
Files
-
1da8df79fb5ac200ad2ba044e4e5a1a4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ