Static task
static1
Behavioral task
behavioral1
Sample
1fabef5a3e5f3873be51797bd885f3bf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1fabef5a3e5f3873be51797bd885f3bf.exe
Resource
win10v2004-20231215-en
General
-
Target
1fabef5a3e5f3873be51797bd885f3bf
-
Size
312KB
-
MD5
1fabef5a3e5f3873be51797bd885f3bf
-
SHA1
6c3a80ce63a70c950081f0d40d306253269910a6
-
SHA256
14c95d5675f247e94af14ee190fa435bf6ec3c1e24f154b9aba3e6167e0ca028
-
SHA512
0ea7ab08971d4a9e76a90a29f08453b3bca04cc2e40f50f4861ee3a97393b23bd62f2f420df4463d38c690af903642e694435364d44715630b6bbc2538e2ab7a
-
SSDEEP
6144:8MIw2jyXDO95PEktgkJLddaax7LnaxoHYbATiZ79B:y6stJyy7LawBTiF9B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1fabef5a3e5f3873be51797bd885f3bf
Files
-
1fabef5a3e5f3873be51797bd885f3bf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 304KB - Virtual size: 303KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ