Static task
static1
Behavioral task
behavioral1
Sample
1ba23d7ec770f206800598b7376215d3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ba23d7ec770f206800598b7376215d3.exe
Resource
win10v2004-20231215-en
General
-
Target
1ba23d7ec770f206800598b7376215d3
-
Size
40KB
-
MD5
1ba23d7ec770f206800598b7376215d3
-
SHA1
8e2ed69e71d8c0cd2192272a9e4d6bd9d073f1de
-
SHA256
3f973a6f8233c0b9f9c434f91550ae5be31b507a51497b61be4acdbedc1f8543
-
SHA512
cd997a2579f93a137949bdc6da0ab4c2e5ecf503b00fae1f767cdc80714eaa2659f3cfca6f59f689248a0ef9b974f624fb4185cecc6a15a1cd7be61139f9c72c
-
SSDEEP
384:zBQnwvZG8ay7ujUVVLnjMdEZK7wqXkQxbYl7e69M5NNjNaQWMOQo:FqqZyy7uw+fkQ1Yxe6WNaQWM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ba23d7ec770f206800598b7376215d3
Files
-
1ba23d7ec770f206800598b7376215d3.exe windows:4 windows x86 arch:x86
95dd8565ca0bfb2d2d6ae9b23740c4e0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
Sections
.text Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pediy Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE