Static task
static1
Behavioral task
behavioral1
Sample
11c6159ccc1b23455397690f6a0a4e31.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11c6159ccc1b23455397690f6a0a4e31.exe
Resource
win10v2004-20231215-en
General
-
Target
11c6159ccc1b23455397690f6a0a4e31
-
Size
324KB
-
MD5
11c6159ccc1b23455397690f6a0a4e31
-
SHA1
e1bb9e19d234db38c5c5af804cc44b1423db3176
-
SHA256
8f7a606563b95963cb12308dc8b69b0b35445c012fa3c9fe46d424c8e07d96c5
-
SHA512
e80ee65a1d1011b0f886afa8ff9800a421a09a1651a4b1f8a5c107d74a4685cea8bc82eba3fd32d94e34a37796f706a8c03bb01b13203efb428433df8aa622d3
-
SSDEEP
6144:ce6FrikBgM0Tw2IUCwiEStf25f/GkugR+QSlODV6r+ZsslX:cegiHPoWLSByf/2gR+QSlgV6rshlX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11c6159ccc1b23455397690f6a0a4e31
Files
-
11c6159ccc1b23455397690f6a0a4e31.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.pgn Size: 37KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zgxkh Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dcf Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ