Static task
static1
Behavioral task
behavioral1
Sample
1279304f150a517a802465490a2e4795.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1279304f150a517a802465490a2e4795.exe
Resource
win10v2004-20231215-en
General
-
Target
1279304f150a517a802465490a2e4795
-
Size
229KB
-
MD5
1279304f150a517a802465490a2e4795
-
SHA1
6e2750ddc9f6f44ebbab8912ef470428f2d12b2c
-
SHA256
eb1a3595c66496cf22497e4094d26ddda6795045d37ab2bdf9f61c5b411ee456
-
SHA512
e3c337bd00b4d38420cff1be578b0c24dc5bd900b38ffcecb0c71f337a8c91f793c72d8f045c462f569899864fe23a8ed4508e217a32e95618e4c0622e222dc2
-
SSDEEP
6144:neECmt+ceD3wxDmM5HiOBnVBVWGlAWMiDCo2X:neEL+zD3wlmM1RBnboQ6K2X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1279304f150a517a802465490a2e4795
Files
-
1279304f150a517a802465490a2e4795.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 552KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 228KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE