Static task
static1
Behavioral task
behavioral1
Sample
1cfdfaba5e7eca95b91c35eea6b76daa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1cfdfaba5e7eca95b91c35eea6b76daa.exe
Resource
win10v2004-20231222-en
General
-
Target
1cfdfaba5e7eca95b91c35eea6b76daa
-
Size
59KB
-
MD5
1cfdfaba5e7eca95b91c35eea6b76daa
-
SHA1
26c636e3110949f1d956e40999d53d671b463ad4
-
SHA256
e0952c0c160c23a930a2ab3c9844fcbcb86c3718f0f9526b62b9602fc351e103
-
SHA512
f804d8f97ccc0306b54e101220268fe50f3f49e5012b8715c4a39f6fc5fc071ce5b7a0fa5a1c21b053e4f5053b994fade5099a77eb3d0372ac3077d8b951db77
-
SSDEEP
1536:nkZBfKVNLTwFovrSOLEcqUc35EGqg1z34SG3jZY:nWhKVXr1LEcq9qGqgmSGO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1cfdfaba5e7eca95b91c35eea6b76daa
Files
-
1cfdfaba5e7eca95b91c35eea6b76daa.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 874KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE