Static task
static1
Behavioral task
behavioral1
Sample
1ed288ebb16160197abcfe49359f1b12.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ed288ebb16160197abcfe49359f1b12.exe
Resource
win10v2004-20231215-en
General
-
Target
1ed288ebb16160197abcfe49359f1b12
-
Size
762KB
-
MD5
1ed288ebb16160197abcfe49359f1b12
-
SHA1
2c7a790152e6d77c857fbebb72278ed2065b61da
-
SHA256
e5b84e6c69ab6fb11df19205d23d81cfddc2961bc6179712cee9d3383618cf1c
-
SHA512
463b8ae3d83e517f0c11c190033550a5e60b8c61487430bf8383ed9a45a3df2ff6c379ca6e0af38fb9f0320f82e6ab96b8cd0208f5d7882a7a205bc37f6a8a91
-
SSDEEP
12288:H2p0Lg2llmloXUXmi+2CyyJ/HflJIoS5SVc0sKGVNgTZlKIvaX:W2LZlmlZN+IwnnW7tNgTZl/va
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ed288ebb16160197abcfe49359f1b12
Files
-
1ed288ebb16160197abcfe49359f1b12.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 615KB - Virtual size: 615KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 6KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ