Static task
static1
Behavioral task
behavioral1
Sample
1ba0c3b4145185b4911053fa96f9948c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ba0c3b4145185b4911053fa96f9948c.exe
Resource
win10v2004-20231215-en
General
-
Target
1ba0c3b4145185b4911053fa96f9948c
-
Size
20KB
-
MD5
1ba0c3b4145185b4911053fa96f9948c
-
SHA1
9443db332afad04f24668de95543250f3974f2a0
-
SHA256
eb05e1c011bcc6ea633e92e11bc93d0d3e5ff2531b8e2c8228dcbf349659c07e
-
SHA512
8e03114df0a2a77297cf033f5c35c7b4045ac48250c967d94c4938f7f2d456afaaee95ec9cac40d76268fa60a0dc1b3d7f76e3dca93ea2348985c9bf6ac215ad
-
SSDEEP
384:/lR4S/1Pxz9eWvIvP96uHvzcXL96unX2T1L9V7W9xdW://f/1PzeK2Tu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ba0c3b4145185b4911053fa96f9948c
Files
-
1ba0c3b4145185b4911053fa96f9948c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ