Static task
static1
Behavioral task
behavioral1
Sample
1fa7ee3c1ff8e652415e590f1ced8bd5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1fa7ee3c1ff8e652415e590f1ced8bd5.exe
Resource
win10v2004-20231215-en
General
-
Target
1fa7ee3c1ff8e652415e590f1ced8bd5
-
Size
235KB
-
MD5
1fa7ee3c1ff8e652415e590f1ced8bd5
-
SHA1
38b27a44aaa7509833ce91d3076bdc4685be87e1
-
SHA256
79e0ff2b1c2c59fb9a05f8871da761e4d0fcff8c217c455ea8d9ffccd0d159ef
-
SHA512
b06631f3df86936506a069f800f14fae92893ab770d8064cd040dc3de35945cc7fcbf9ce9a5d7642a574fd2faa1a86d1cd6210b4b0f2420a45aa55c38ff0cf10
-
SSDEEP
6144:9OGsqc6xN2yejYnleyJLnSQHsEkeRnGNFg:9vk9qL6EkekF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1fa7ee3c1ff8e652415e590f1ced8bd5
Files
-
1fa7ee3c1ff8e652415e590f1ced8bd5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 117KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 13KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE