Static task
static1
Behavioral task
behavioral1
Sample
1e6d7703ba9b84ba1b7ca07112a43c95.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1e6d7703ba9b84ba1b7ca07112a43c95.exe
Resource
win10v2004-20231215-en
General
-
Target
1e6d7703ba9b84ba1b7ca07112a43c95
-
Size
96KB
-
MD5
1e6d7703ba9b84ba1b7ca07112a43c95
-
SHA1
a52e696d631867b452d55860ed1383553c24370f
-
SHA256
188d1aac16fc6985297cd1f6e3f9d892de84f7a2ecf8ca040527644492a8ad8f
-
SHA512
b35b94e1d0f1fe55e8038dfc139667da4a266de0404f346b9eb575ca8dda1a72f395a60952253575180d11a7faf57ef9024264cd72d3569c61dd42807fcf1001
-
SSDEEP
1536:MiliL4pW/MHnx2DY9V1C3k+q0iCx8QkLWLugBIJW25mYIv/y9a:6Ya8TGKDURy9a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e6d7703ba9b84ba1b7ca07112a43c95
Files
-
1e6d7703ba9b84ba1b7ca07112a43c95.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 4KB - Virtual size: 162B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ