Static task
static1
Behavioral task
behavioral1
Sample
1549ea0152b9d8a2dde35a186b64e8fa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1549ea0152b9d8a2dde35a186b64e8fa.exe
Resource
win10v2004-20231215-en
General
-
Target
1549ea0152b9d8a2dde35a186b64e8fa
-
Size
169KB
-
MD5
1549ea0152b9d8a2dde35a186b64e8fa
-
SHA1
2084ded3a4fb506b9ae69565a226e2baa6ded63e
-
SHA256
66ef692fc44660e3df2ed731eaff47d8eb2f96ca134fd3d8fbff88bbd2b11a11
-
SHA512
543e999298ae869a5a1ceb28b5aad2cc34c03957dbeefb84fcac0bcaa3c0c19b78c427a908b77378f0bc9dbd9f539ae4c74bc3e5b45d15e367fcf9f0fb0581fb
-
SSDEEP
1536:jSR1Xel358Im3WBwrqT7W1FWlP7oUYKUvNY9TiY8LPqMvfnaMLsMfy1jL95fCu/T:m1S7WmKzhPqMvbs2sRQu/1NcY8+6bOI6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1549ea0152b9d8a2dde35a186b64e8fa
Files
-
1549ea0152b9d8a2dde35a186b64e8fa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
��:~Z Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jECK Size: 32KB - Virtual size: 32KB