Static task
static1
Behavioral task
behavioral1
Sample
1c109cceb5f8ebf4c7f7f1f99fd71c54.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1c109cceb5f8ebf4c7f7f1f99fd71c54.exe
Resource
win10v2004-20231222-en
General
-
Target
1c109cceb5f8ebf4c7f7f1f99fd71c54
-
Size
105KB
-
MD5
1c109cceb5f8ebf4c7f7f1f99fd71c54
-
SHA1
c668b3f5ad6e6772f408e82a6f0d52204418a939
-
SHA256
533d5f61aa754a73db48ae59a078ead114a0ffa13383f95714b00c80f9627679
-
SHA512
e5686de643acb1da301f3e58b37b4903af4db2c6e3568f18481c529858abe8f827979d7d4fe3a94905598e66ffa9adaf7d8058c8e0cea0ecb527a83aa2afce0d
-
SSDEEP
1536:2gggPdxQvISHs1S5M29j9p24RLsLGx1+tmp53Jx7lmhH4lf3WhC1iTt6DtW9YH:QgVrSAS5H9j9pjA2153DIkfGhCRpW9i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c109cceb5f8ebf4c7f7f1f99fd71c54
Files
-
1c109cceb5f8ebf4c7f7f1f99fd71c54.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 91KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ