Static task
static1
Behavioral task
behavioral1
Sample
1d5fc616d4c9165d20fd438e1ca010c2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1d5fc616d4c9165d20fd438e1ca010c2.exe
Resource
win10v2004-20231215-en
General
-
Target
1d5fc616d4c9165d20fd438e1ca010c2
-
Size
82KB
-
MD5
1d5fc616d4c9165d20fd438e1ca010c2
-
SHA1
b0d52263c9b023b9ea944fa75f713a040726b716
-
SHA256
e28a04a8daa6700bb19dc4fee5abb36297b40ee9ea7c689992e6a28e194a1788
-
SHA512
793ea2cf47a3a797563c24df4783f597fb2237667d97d5da012b27369f213ae78e033eebfb425672b2049779c5b4195b97f3b11ef6fedaf860757c2e94a07f9e
-
SSDEEP
1536:vBFqmsys1HNR2xqXyJeBRKv7WqC2QYoV42gk3SFnKRLddFGN5yBixat4tp6m7:J0msPR2xMyJeBRKSjlYgG4LddFGHiia+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d5fc616d4c9165d20fd438e1ca010c2
Files
-
1d5fc616d4c9165d20fd438e1ca010c2.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ngxid Size: 19KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jueg Size: 18KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ