Static task
static1
Behavioral task
behavioral1
Sample
1b6195f1870e8ad0b494888045595fcc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b6195f1870e8ad0b494888045595fcc.exe
Resource
win10v2004-20231215-en
General
-
Target
1b6195f1870e8ad0b494888045595fcc
-
Size
82KB
-
MD5
1b6195f1870e8ad0b494888045595fcc
-
SHA1
5f976e62a5419c92fcc89505a4b74067bcec9465
-
SHA256
e8fe2ffc583ae51aae8ac4f7ca77be1d5e0f7a3e85eb1d91e8de45059f93e54f
-
SHA512
3b0e0198188f061fef4e6b15bb48ff206711e546ca0432655a95ce2efde119270cebcad4b99f6e6b104dd5769433b25fed376c9d267a2aa4249ede650a0f9232
-
SSDEEP
1536:Qzb4aDT2fHW5pKNekpCJ29gZAIFrw/n0WOAzPP0gdMmg:04aH2fHupkm2kZrun03m0gC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b6195f1870e8ad0b494888045595fcc
Files
-
1b6195f1870e8ad0b494888045595fcc.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ