Static task
static1
Behavioral task
behavioral1
Sample
1e7492af26f77a5a8ade4b8c1c8a23ab.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1e7492af26f77a5a8ade4b8c1c8a23ab.exe
Resource
win10v2004-20231215-en
General
-
Target
1e7492af26f77a5a8ade4b8c1c8a23ab
-
Size
513KB
-
MD5
1e7492af26f77a5a8ade4b8c1c8a23ab
-
SHA1
cf7eb922a7ecf8045b69b8566a62a3adc58b2c4e
-
SHA256
e936b4717482ee44fdfc2334a563f62c17278daa74fe217ea41c15a28654d354
-
SHA512
f021a164a7ea00f811f5e9d0a9fb18a2a80954704cb754d3ce031eb593d15c05f5ba5fc698699409e56500f1f1c44305a0cfd668a8ced2790a2b91366f7ab640
-
SSDEEP
12288:+urx5lZb/EetEmLlfeNcUhs18c+nFBAtb1:+AnFonhs1h+nF2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e7492af26f77a5a8ade4b8c1c8a23ab
Files
-
1e7492af26f77a5a8ade4b8c1c8a23ab.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 376KB - Virtual size: 376KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ