Static task
static1
Behavioral task
behavioral1
Sample
1836f2a23eac4a99c81526e13386c672.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1836f2a23eac4a99c81526e13386c672.exe
Resource
win10v2004-20231222-en
General
-
Target
1836f2a23eac4a99c81526e13386c672
-
Size
385KB
-
MD5
1836f2a23eac4a99c81526e13386c672
-
SHA1
09aca8871b17ad5099d2ad53d9dd9ae51dac5bd2
-
SHA256
4d76f425f836a228b15a5972c96f1d344ec852b3f5584b00d083d834cc4b99ad
-
SHA512
0c46fe4cbc4a0ec6cd3f6e0c77ab4b2dd3bdf76ed1de39dabd2d9f9869f5456b5a34b9fad9268b39056f4da7afa6176db848bffa24557b6c839ced6ccf863741
-
SSDEEP
6144:U/cLyuIN9GQX1MZ4v5Ld0RWjw/VqJawL95vFbXR0j3Y8UE2N1eLcI8dMB:ZLE/GQX1McE/VqwwLxN0jI8RA152B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1836f2a23eac4a99c81526e13386c672
Files
-
1836f2a23eac4a99c81526e13386c672.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ