Static task
static1
Behavioral task
behavioral1
Sample
1d0ea9b1ccc6e74a45dcc66831f3a73f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1d0ea9b1ccc6e74a45dcc66831f3a73f.exe
Resource
win10v2004-20231222-en
General
-
Target
1d0ea9b1ccc6e74a45dcc66831f3a73f
-
Size
1.0MB
-
MD5
1d0ea9b1ccc6e74a45dcc66831f3a73f
-
SHA1
b19963d8afa9aebadc4bd50f568e746659293441
-
SHA256
1fa647aa8be5c4d63e9cd695bf1eca6c418570700ddfceaafe7a127b4e984c43
-
SHA512
fbcc23447e3120bd08aebb00ec86a475f9332500ca473379c225332386dbceceb39ba036bbea0f8a275c36ff8194bf75620e44eb82e5b50e7bf8a52b5e1683af
-
SSDEEP
24576:p34lKBEwKJqkBEwKJqo8AAD/Or3s5PcimX:peK1k1oiD2r8xC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d0ea9b1ccc6e74a45dcc66831f3a73f
Files
-
1d0ea9b1ccc6e74a45dcc66831f3a73f.exe windows:4 windows x86 arch:x86
1bd6a1cccc0acf0bc50f0359268b4fc1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
msvbvm60
_CIcos
Sections
pec1 Size: 38KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 728KB - Virtual size: 800KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pec2 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pec3 Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrcZ Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE