Static task
static1
Behavioral task
behavioral1
Sample
011a6bb242ef525b58bf3089f2e6cf50.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
011a6bb242ef525b58bf3089f2e6cf50.exe
Resource
win10v2004-20231215-en
General
-
Target
011a6bb242ef525b58bf3089f2e6cf50
-
Size
381KB
-
MD5
011a6bb242ef525b58bf3089f2e6cf50
-
SHA1
645e858a85818c8d0206c27898c607f8ab13b18e
-
SHA256
e08a6ebd4439a3cbffcdda93c2b5d39209dcb35ba38376c09aeb8ce018c4d0d3
-
SHA512
f5a7377ca44283687647ed5f85e5d069447fec310c0402f2606cbddeeca2c4fc1bf8d565c013be35913efd38bd517945bd353086ebb33e85657ba40eb2e6b300
-
SSDEEP
6144:0QCmdDTFbsxHGu0y6DPDRHGsqyMyLuo0OBdKvstJMeycrjb1TZQRzwLQ8/6RWDWn:ZdFYmeqPtmsB6odB4E69crn1T2m88mW+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 011a6bb242ef525b58bf3089f2e6cf50
Files
-
011a6bb242ef525b58bf3089f2e6cf50.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�!�x0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�!�x1 Size: 380KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�!�x2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE