Static task
static1
Behavioral task
behavioral1
Sample
1c6345aa3efd7ea012ac7f9be52f1569.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1c6345aa3efd7ea012ac7f9be52f1569.exe
Resource
win10v2004-20231215-en
General
-
Target
1c6345aa3efd7ea012ac7f9be52f1569
-
Size
8KB
-
MD5
1c6345aa3efd7ea012ac7f9be52f1569
-
SHA1
a0a07e370fc53b649ca8e9ddd3521d6c046773d8
-
SHA256
bdde831dea6f3b6d5c1a34e7d18306d7feed666dcf50a14ce727b970163175f5
-
SHA512
a3f8fd8e86bc012965a356ae491abe00a8ef98851dbca0a396ab7b191972e2322202baba3df3857cb5404f8b4a5c89f5efda3d5267acf55a026067f09b62dedb
-
SSDEEP
48:OEPxQovclICkfGOLgdpVmSUQlXMjM8O/2fb/ayAH3PvhIB6pT:nP2ovclqGOcdpMacj5O/weycvuQpT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c6345aa3efd7ea012ac7f9be52f1569
Files
-
1c6345aa3efd7ea012ac7f9be52f1569.exe windows:1 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ExitProcess
Sections
CODE Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ