Static task
static1
Behavioral task
behavioral1
Sample
011e1fd9e1748ecb4deb934b2c53df3f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
011e1fd9e1748ecb4deb934b2c53df3f.exe
Resource
win10v2004-20231215-en
General
-
Target
011e1fd9e1748ecb4deb934b2c53df3f
-
Size
245KB
-
MD5
011e1fd9e1748ecb4deb934b2c53df3f
-
SHA1
a6b1e219a075ad2fd15d9c58a41f4058646e20bf
-
SHA256
13c742fc3fa49c315858a56721644647522ff5d8b664381278ecbbfa5a06ac72
-
SHA512
433aef935d89dd99af6fd1f99b4f7d7496ff196c4aa076cd1f908ba84e6f0a73ad8009d2c7add1116398b1b5999ff8f21d119adde0be0947be7ef8650d8e6f61
-
SSDEEP
6144:XL7mT9+gfc+qyOttGEArzdxPKiFHtbSPPYogIElk2LXlt:2Jg1AFPHxYPZghS2Dlt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 011e1fd9e1748ecb4deb934b2c53df3f
Files
-
011e1fd9e1748ecb4deb934b2c53df3f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.pmj Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE