Static task
static1
Behavioral task
behavioral1
Sample
1dbd83901bd696aebb6f34131595e1b6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1dbd83901bd696aebb6f34131595e1b6.exe
Resource
win10v2004-20231215-en
General
-
Target
1dbd83901bd696aebb6f34131595e1b6
-
Size
512KB
-
MD5
1dbd83901bd696aebb6f34131595e1b6
-
SHA1
c5cd5aedbaca0c5084e09f0eac87e68400046ccd
-
SHA256
17c9545be341a9e9c34eba98abe8ec078a727de16ac919876a83668d40b09d6a
-
SHA512
e0614f1812b5610094c88461d91627b9be1049377bb73a4b430700ff83b29d1b78a8dd42069cb4171f2f80bc3a5152267e371513c10e3083746f645235658f85
-
SSDEEP
12288:OBDUC0EtwmPPubzdh1C6JCAM4ydqZcCFvK8I3u26:OS9F4W/7M2RFvi3W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1dbd83901bd696aebb6f34131595e1b6
Files
-
1dbd83901bd696aebb6f34131595e1b6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 803KB - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 251B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE