Static task
static1
Behavioral task
behavioral1
Sample
1d5f2af1f0263f846e73f3d4927a7f99.exe
Resource
win7-20231129-en
General
-
Target
1d5f2af1f0263f846e73f3d4927a7f99
-
Size
3.9MB
-
MD5
1d5f2af1f0263f846e73f3d4927a7f99
-
SHA1
e09cbbb7cbe76b350c9f0d6b7ef715c1d16da8e2
-
SHA256
7676d9654660f7522564e8ded5b61fe449e18dffaf7067aebfc416d4e662de33
-
SHA512
458192bb567350f79c594245f7efe6f4d4ab734dbcecd3b6c9edeecfda3eea5135ee20c71105f7f20819d3ee75296a848486f58512b8e1a70b4bb250fa89162f
-
SSDEEP
98304:e23kXXjxT8+mBqtHnSE8pMyNhHsn23BVMUQN22V:eDxY+m2nSs0anqBVMdE2V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d5f2af1f0263f846e73f3d4927a7f99
Files
-
1d5f2af1f0263f846e73f3d4927a7f99.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
q7l?Q Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.dark Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ