Static task
static1
Behavioral task
behavioral1
Sample
1e5ae5c1b5d79faaa93f9ba2ad9fff39.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1e5ae5c1b5d79faaa93f9ba2ad9fff39.exe
Resource
win10v2004-20231215-en
General
-
Target
1e5ae5c1b5d79faaa93f9ba2ad9fff39
-
Size
154KB
-
MD5
1e5ae5c1b5d79faaa93f9ba2ad9fff39
-
SHA1
ed188d547cc945fbee6c3d9001e7f0bd70481509
-
SHA256
e6a90bc75b98f33ed63572599e8f77cf88037ca865d86634cefde34b05c60117
-
SHA512
02f95dff0e3fcd4d5481bcd787be3d41147515599148c08c7a9ea3bdd76b3701e4a7a27f15d6aff8b4732caf6dce5db95c91750afb128f350958c40bbd573075
-
SSDEEP
3072:KWaG6Hnnk6AOLVzzi8uFSutQd+NMODSNGkM05xlLMuDXv17v:TapkwzzJNd+NhSNGkM05xVHDXN7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e5ae5c1b5d79faaa93f9ba2ad9fff39
Files
-
1e5ae5c1b5d79faaa93f9ba2ad9fff39.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.... Size: - Virtual size: 568KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.... Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE