Static task
static1
Behavioral task
behavioral1
Sample
1f86d2272852c8eeb5d3d943d4a7125b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1f86d2272852c8eeb5d3d943d4a7125b.exe
Resource
win10v2004-20231215-en
General
-
Target
1f86d2272852c8eeb5d3d943d4a7125b
-
Size
149KB
-
MD5
1f86d2272852c8eeb5d3d943d4a7125b
-
SHA1
34bc03a1c35ddf5b6da1d299404f3413713f3a7c
-
SHA256
44cffeae53da2285a72c041f45b34ddcf446aa1f4bf41de9c8a8b1745e0e60fa
-
SHA512
3d38dfa6aa9f0de0b5599c66bf99503ba7460ab0ffaa3f67746f8f9851d265fe25920d9f05d8b54d36d845d780ccb31acb22976bf6ee4262ed5e7cb4db3c2b17
-
SSDEEP
1536:v3DidgZpRo3FN4cA85L1PdRWFvnMrG5vWA13amp7fZDP9eogAojg7LYTAXEr:ri+2FN4nqPdQarcFa2pVeog1g70T8Er
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f86d2272852c8eeb5d3d943d4a7125b
Files
-
1f86d2272852c8eeb5d3d943d4a7125b.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ