Static task
static1
Behavioral task
behavioral1
Sample
11c2168f0acef8ab0a2b3398d432e28d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11c2168f0acef8ab0a2b3398d432e28d.exe
Resource
win10v2004-20231222-en
General
-
Target
11c2168f0acef8ab0a2b3398d432e28d
-
Size
45KB
-
MD5
11c2168f0acef8ab0a2b3398d432e28d
-
SHA1
6d1c0a21bb417375205bd216a49933eb9d33f164
-
SHA256
c64c4c8627e9df6d7a6e932f207ec3f550c907a71ac4697ec8ee8961db828338
-
SHA512
b1f48d5d669c4ccf18565ef53f513ab4d097ffc21de336ce590129fc0d96e8eaedc76eb5a9077e816a6d8082c3cf378381fe41072c593066ce0d3ea9aa608c49
-
SSDEEP
768:+hC9qiQF2o8wXGzz1Q1pcM76NUx9B8jUoRCJRWx/3gZ4rar7t5jhLV8xQ:r9qiQF2owCGM7J8jXj+rdLixQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11c2168f0acef8ab0a2b3398d432e28d
Files
-
11c2168f0acef8ab0a2b3398d432e28d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ