Static task
static1
Behavioral task
behavioral1
Sample
1fad1d224a0cce6460f1ba39fb1cfd7e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1fad1d224a0cce6460f1ba39fb1cfd7e.exe
Resource
win10v2004-20231215-en
General
-
Target
1fad1d224a0cce6460f1ba39fb1cfd7e
-
Size
9KB
-
MD5
1fad1d224a0cce6460f1ba39fb1cfd7e
-
SHA1
b3cefeeef3ea291c05ab4c3c06518a1ffca36f04
-
SHA256
7c886e1281c85241a6a39ed8179b75298a86af38e6aa9d0513ad6723b3d9dae8
-
SHA512
ef8a83f6b6a916e01499dfdd86880de92c4d393299aa599d3ddb94c52086461c270c9a838fd1be82a3852b7b7124e5234e8fd6b1e2ecf7f9fe59c71e7c9b7459
-
SSDEEP
96:eV1HfHWSjDw5JQTiYzB2F5+X+SlJZBCEut/4WM7OLBlU35qbWwKKGgKW:G1HfHWYitgZWx8GlU35UWwKTgKW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1fad1d224a0cce6460f1ba39fb1cfd7e
Files
-
1fad1d224a0cce6460f1ba39fb1cfd7e.exe windows:4 windows x86 arch:x86
9b5cffb13e4632ef6616a394f2bc1411
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter
msvcrt
_spawnl
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fflush
fopen
fprintf
fread
free
fwrite
malloc
remove
signal
strcmp
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 176B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE