Static task
static1
Behavioral task
behavioral1
Sample
1c65d0c8ba6dea2e1fbd15438e2a8e8a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1c65d0c8ba6dea2e1fbd15438e2a8e8a.exe
Resource
win10v2004-20231215-en
General
-
Target
1c65d0c8ba6dea2e1fbd15438e2a8e8a
-
Size
5KB
-
MD5
1c65d0c8ba6dea2e1fbd15438e2a8e8a
-
SHA1
28a3762ac912a24a6b47ca9e998a4bdd822aee4e
-
SHA256
e7a08102f09ececc4638662b21224a561723116a55b753170ecf6462acf3d0d9
-
SHA512
d3da9991971f81488d25bf1913ae600cfdac152a8c9eb2919e8fd4d3c151ed9eff90f836cc6bca824f21a02a68947e99e08a6f3e91fa17d0bb7f8a1dbdaf174b
-
SSDEEP
96:x3hGIGk62s/FRS2GF4nco5o7GOPDYoPBGY87rOey:xCtr84coKaOPDYoEhrOey
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c65d0c8ba6dea2e1fbd15438e2a8e8a
Files
-
1c65d0c8ba6dea2e1fbd15438e2a8e8a.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 558KB - Virtual size: 558KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ