Static task
static1
Behavioral task
behavioral1
Sample
61d1ba852257d873dcae37e70892cee2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
61d1ba852257d873dcae37e70892cee2.exe
Resource
win10v2004-20231215-en
General
-
Target
61d1ba852257d873dcae37e70892cee2
-
Size
1.1MB
-
MD5
61d1ba852257d873dcae37e70892cee2
-
SHA1
5f6d8fa9dc009dfa23a1f8f689245fdda59a5d31
-
SHA256
cb691397ed3beb58aff18d648cd82117e465502c7ed45017b5165695323a7673
-
SHA512
11c98864e32522e03667081b4d4f2b36c62d738b7eaa19e3675f9235b698bec9c149ce650ef15fd1da1c5c3b058a9d988d4e0f3e1085adf3d657a71a0540c210
-
SSDEEP
24576:AUO6DKRxV5q7c3X/u/JO/pfYXm1jaldmJSiKLSTTSR9UdqVd:AMAqwH/yaI6jaldmcxLSTT+z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61d1ba852257d873dcae37e70892cee2
Files
-
61d1ba852257d873dcae37e70892cee2.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE