Static task
static1
Behavioral task
behavioral1
Sample
1d64201f347210417efd4242b33d7555.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1d64201f347210417efd4242b33d7555.exe
Resource
win10v2004-20231215-en
General
-
Target
1d64201f347210417efd4242b33d7555
-
Size
392KB
-
MD5
1d64201f347210417efd4242b33d7555
-
SHA1
878a2caf4c3cc7bd54921ce8b6b46e429ac68db2
-
SHA256
069964f8cc59369aa119f6894a0a0c5308e27e08daace84ba78e3f6c623927ec
-
SHA512
964df7c7a759e9b540843659ee6743a1245dd4fb87e09db7ef79b06a8e6f7666f2fc18d526af78d65fd0eb6e16844cabf3773695672a244ece2336b07ff572b1
-
SSDEEP
6144:E/26kJC3oghja3DpYGaYxKrNV0eS08eMQTtIFkx88dOwDmBOFj9c1sUKMhNn2tcF:tC4gNobaYoN2eS0ZZIFkPowK1UMhNxoM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d64201f347210417efd4242b33d7555
Files
-
1d64201f347210417efd4242b33d7555.exe .vbs windows:5 windows x86 arch:x86 polyglot
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 169KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 398KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tqn Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE