Static task
static1
Behavioral task
behavioral1
Sample
1e81fd725ded57588cdf3c2f25d93d0c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1e81fd725ded57588cdf3c2f25d93d0c.exe
Resource
win10v2004-20231215-en
General
-
Target
1e81fd725ded57588cdf3c2f25d93d0c
-
Size
456KB
-
MD5
1e81fd725ded57588cdf3c2f25d93d0c
-
SHA1
306b18f2954ae2902882e9a2f93d0bd86931c5f3
-
SHA256
c6ebf549103b1f1f90d3de4fbc565c2cd6108936536e8ae709305009d2db2a96
-
SHA512
890c8016c32323509b81f403deac00bc92d224c794e3f3819b31d9d05f7807a4e6d6246d20c654c9d1e686a679894f03622b054c5635e712dbc00f01215d0eb8
-
SSDEEP
12288:UGH3TNk/aawlefbtI5P+/trgmSXod8Rxwzf5OUwA:Uk3T7lWIc/gNwzMr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e81fd725ded57588cdf3c2f25d93d0c
Files
-
1e81fd725ded57588cdf3c2f25d93d0c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.bss Size: - Virtual size: 772KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.packed Size: 428KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.loader Size: 15KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE