Static task
static1
Behavioral task
behavioral1
Sample
1e00f794e00caac5de2510c052b4fadd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1e00f794e00caac5de2510c052b4fadd.exe
Resource
win10v2004-20231215-en
General
-
Target
1e00f794e00caac5de2510c052b4fadd
-
Size
385KB
-
MD5
1e00f794e00caac5de2510c052b4fadd
-
SHA1
fdbe91564dfa6b489ba387bdc52e1ad60c884069
-
SHA256
30f040c2996586056eb0cab2c33cf1ee5429554f11cc54dfd631132926176e7e
-
SHA512
0f476b9fd8c676a1ed87a0c63efabf8550683f7ca3ef99efca9312dec87c3528d54999e943b196ca2eeb47cc5059ceb508f24eb740c76ae65cda0604262d7a6a
-
SSDEEP
6144:TR0i0a0GbCoTwPvwDEZRcpv5SOtC26Mg7PD1Rs3fYpL4gv4QSXPF16I7B:Tmi0a0eQvE5dY+gX1RsPYpL4M4QKPrB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e00f794e00caac5de2510c052b4fadd
Files
-
1e00f794e00caac5de2510c052b4fadd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ