Static task
static1
Behavioral task
behavioral1
Sample
01f75423b04ec045579f777371c945db.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
01f75423b04ec045579f777371c945db.exe
Resource
win10v2004-20231222-en
General
-
Target
01f75423b04ec045579f777371c945db
-
Size
392KB
-
MD5
01f75423b04ec045579f777371c945db
-
SHA1
502c4f8ffe5314c0118985de5678ce147ea24d0d
-
SHA256
22ede3ee914ddd3cc992b0c37c9b2107f4e2b9a177ff05233315326ce6ed57cc
-
SHA512
5bbb3b7db24b7a74513ae8a25bd4dce6b8ef63b414de2a95e19b8ba831c2006d31d74ad4d26afa293dc535c08a14315f842ccc733d6324acc103e5e44e2f7c52
-
SSDEEP
12288:HC4gNobaYoN2eS0xZJ3FLH+75yQXdcTg87/:HHyobaYoN2eS0xZJ3d+VZOJz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01f75423b04ec045579f777371c945db
Files
-
01f75423b04ec045579f777371c945db.exe .vbs windows:5 windows x86 arch:x86 polyglot
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 169KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 398KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.heb Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE