Static task
static1
Behavioral task
behavioral1
Sample
1dfaff0e072e21aa71c4d4791430e728.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1dfaff0e072e21aa71c4d4791430e728.exe
Resource
win10v2004-20231215-en
General
-
Target
1dfaff0e072e21aa71c4d4791430e728
-
Size
196KB
-
MD5
1dfaff0e072e21aa71c4d4791430e728
-
SHA1
59f3a31e729e31d570a1abbf9975ecfdeb2a83f5
-
SHA256
0f32ba871209cdcee220142dd2246ad4eaff9bcc567d7ee3561c40d050135a9d
-
SHA512
cd5ec27c6930d0f8e045eee111c9b62a7a4c88d92c5ced34189c6c5b460b0a1ac15fc02d618775ae4b57836bdaf2c11c7dcf111505d7579333291131132e33b3
-
SSDEEP
6144:OO2Wwqr+D5V4GDaFswO6Fz0sKy7Nu1ZPmG9jn+WGZO5t3UvAYZqkDvdUC1TgHVy:Pjwqr+D5V4EwO6Fz0sK+oPmG9jnbGYqj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1dfaff0e072e21aa71c4d4791430e728
Files
-
1dfaff0e072e21aa71c4d4791430e728.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 241KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 17KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE