Static task
static1
Behavioral task
behavioral1
Sample
1e99eeefb66f8e63631a3880d7a969fa.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1e99eeefb66f8e63631a3880d7a969fa.exe
Resource
win10v2004-20231215-en
General
-
Target
1e99eeefb66f8e63631a3880d7a969fa
-
Size
1024KB
-
MD5
1e99eeefb66f8e63631a3880d7a969fa
-
SHA1
fffb6561c666574e0bb5059639fbc03697f4b518
-
SHA256
5b6a58a0f15d90a7b6842e9b5ce3c72877805e2e216cca807acc6724ed337245
-
SHA512
56aca4582b613fbda609ed06876ed364a7d89450364d256bdf26ca83b2e022f170c76f8ccd1099e80d92a5a598e88b4a33d4e1b4741a1ddab29c4a7e8998439f
-
SSDEEP
24576:ZQkhOTOwxy0ZBzA050AUxENO/Al2Bm6Uz/kzD:ZZh6OwJBzvsxENKLmUzD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e99eeefb66f8e63631a3880d7a969fa
Files
-
1e99eeefb66f8e63631a3880d7a969fa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE