Static task
static1
Behavioral task
behavioral1
Sample
1956be4fbe084ee3ac99790798774e94.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1956be4fbe084ee3ac99790798774e94.exe
Resource
win10v2004-20231215-en
General
-
Target
1956be4fbe084ee3ac99790798774e94
-
Size
1.3MB
-
MD5
1956be4fbe084ee3ac99790798774e94
-
SHA1
2df863aaf30daaa75caace0a5c29ea0db7aac4a9
-
SHA256
54c171b3d4487f5b131255f2f1239bb51f80e6160e2aebe06b1ed66a49390b3f
-
SHA512
377196b57bd49e63184f358b37a8dfeb1f72ac0953dc6c00773b752b334d0d18ac976a5ef55b21926cf250b98cc3168a82394f5cddeb4eb7683d31457e6b290b
-
SSDEEP
24576:/wYiH16zyJLAd4Mr+1YBhLHhHlJ1JJYJJZXJuPJJJJJJJJJEgOJZ1vBUBE5JJKJc:YxA3r+gbwOesBcAIuM5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1956be4fbe084ee3ac99790798774e94
Files
-
1956be4fbe084ee3ac99790798774e94.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 620KB - Virtual size: 618KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 608KB - Virtual size: 605KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
....... Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
....... Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE