Static task
static1
Behavioral task
behavioral1
Sample
1ea35d0b9ffeb75b59b6a6d45d7091ed.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ea35d0b9ffeb75b59b6a6d45d7091ed.exe
Resource
win10v2004-20231215-en
General
-
Target
1ea35d0b9ffeb75b59b6a6d45d7091ed
-
Size
484KB
-
MD5
1ea35d0b9ffeb75b59b6a6d45d7091ed
-
SHA1
e5851ac3f327c3e668e09802a186e0dcfa94d756
-
SHA256
cf5b211cd0d9c33947e258d4c32e6839b2cb7c5a2da104fb6e48a7bd781c6f12
-
SHA512
e113fdb051bb946413e3b720c6d8fc871e6ad5d9d7da003282bf1dda923bfa9485a4fb553c73ec28b4a7e49d63dc01fceac4b0ea2ff8258f866e03345b738883
-
SSDEEP
12288:i9d5NfCqIpBMxF+9CxjlP8ONPEwSurjepev:i9d5NaqI/MxFGCr8fBwjR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ea35d0b9ffeb75b59b6a6d45d7091ed
Files
-
1ea35d0b9ffeb75b59b6a6d45d7091ed.exe windows:4 windows x86 arch:x86
d4cec0adac27eba1324787ad915918bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetDllDirectoryW
user32
GetProcessWindowStation
GetKBCodePage
GetClipboardSequenceNumber
Sections
.text Size: 478KB - Virtual size: 480KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 358B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE