Static task
static1
Behavioral task
behavioral1
Sample
1f67b0e04a6d5c3dca142524945027bb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1f67b0e04a6d5c3dca142524945027bb.exe
Resource
win10v2004-20231215-en
General
-
Target
1f67b0e04a6d5c3dca142524945027bb
-
Size
426KB
-
MD5
1f67b0e04a6d5c3dca142524945027bb
-
SHA1
5f8a318ede44e64c20ef5043b237936ad8b934d0
-
SHA256
2f5afcbef3564f09121846b29f2c050418de83395d1f9d08cbd8df03b24f5bc7
-
SHA512
9f56adbe7d0aaa9821b6ed4ecb21c5403a5a8921738b587f8a933b3b1800fa07c1df8c04dc659fa01bb5cc7ffc708d2736e62da3c66c81bb0d21993a2f47e4cd
-
SSDEEP
6144:aiFUvYoYDm5v8DJtBTd8dbVTh2adDWAzuroj3zjlYL1Q3R:aigYLm5EDJtBJ8hrlurovhfR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f67b0e04a6d5c3dca142524945027bb
Files
-
1f67b0e04a6d5c3dca142524945027bb.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 232KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ