Static task
static1
Behavioral task
behavioral1
Sample
1eb0970e53526a4d7e8355080d009d28.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1eb0970e53526a4d7e8355080d009d28.exe
Resource
win10v2004-20231215-en
General
-
Target
1eb0970e53526a4d7e8355080d009d28
-
Size
547KB
-
MD5
1eb0970e53526a4d7e8355080d009d28
-
SHA1
03e588f466fb0c17d712281eac01d87a98cf2b5a
-
SHA256
301d911b0b8cf20ac837ff195e3e3bd433a3ec4db5deba9316790d5d24f0b03d
-
SHA512
b1ffde1cf41aec3ecba34601eb47c24dcc36ebc09dc36201614a557d5dc2208faa2d705d10d90186a6e95cffbe67ea92fc374bdb6f0508725a7da34b108ab532
-
SSDEEP
12288:7Nhpe8VoTMEqN1tKlOB6mIkCohj16Z91OK:RH3V3Eqj01IHa9B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1eb0970e53526a4d7e8355080d009d28
Files
-
1eb0970e53526a4d7e8355080d009d28.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Pav Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE