Static task
static1
Behavioral task
behavioral1
Sample
1f433f6d2343a13a81c3502cc5f7997c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1f433f6d2343a13a81c3502cc5f7997c.exe
Resource
win10v2004-20231215-en
General
-
Target
1f433f6d2343a13a81c3502cc5f7997c
-
Size
582KB
-
MD5
1f433f6d2343a13a81c3502cc5f7997c
-
SHA1
2cc8641cc529db4b64910b30c3c14b1386ce6fd8
-
SHA256
5a7e3aecef4ae4c954be3a7cc89d7c2559ed26af582d1856c2dbb202cedacdb1
-
SHA512
52a61321ebc3a7e74d17b7fef0f6500ecfab8a19c7e4aa954370dbdd7291a08ed62bb3fad2b4848e28fe4d213a83a77be6b5e0cedb9900a2a6cad65038ef7a71
-
SSDEEP
12288:WrmP/g4P4+yEsvZdwFxv+jqCBmS6M4CNvrIwHVHtVaidWq4HzfenVHqNN/1t:W6oG+M52VXaidWNzfQVKNN/1t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f433f6d2343a13a81c3502cc5f7997c
Files
-
1f433f6d2343a13a81c3502cc5f7997c.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 333KB - Virtual size: 333KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ