Static task
static1
Behavioral task
behavioral1
Sample
1f2de2e3d0ac8dad106904e6cb720183.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1f2de2e3d0ac8dad106904e6cb720183.exe
Resource
win10v2004-20231215-en
General
-
Target
1f2de2e3d0ac8dad106904e6cb720183
-
Size
45KB
-
MD5
1f2de2e3d0ac8dad106904e6cb720183
-
SHA1
16044a2c9d7c29abea8022b53f276133948ddae8
-
SHA256
204dc94bc9fe5352032e076821b6ce0d29d16dceb8cebaab2dc61d728bff43e2
-
SHA512
a97e40baa37926b3d2181e1ab12077ee4fc3fbc94d7e276533e006cfdcb0d84b2ff7a2b67ef7c160f6fe764d4fd10caf110d5f681affe7d9db8392c2e9bd37f9
-
SSDEEP
768:FWsyqAggb0oqBVn/TYxXobxqIyR0AF/TmlDbgTVIRrtOL9bB9lZXrZEIRn:8syqFgonuYbcINANXTGRrtcBXNEI1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f2de2e3d0ac8dad106904e6cb720183
Files
-
1f2de2e3d0ac8dad106904e6cb720183.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 18KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE