Static task
static1
Behavioral task
behavioral1
Sample
1e286dcc37952f2d6818ce9d22e23707.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1e286dcc37952f2d6818ce9d22e23707.exe
Resource
win10v2004-20231222-en
General
-
Target
1e286dcc37952f2d6818ce9d22e23707
-
Size
1.4MB
-
MD5
1e286dcc37952f2d6818ce9d22e23707
-
SHA1
64b45ff846ef0f5cfa7585726316d7abde270a6a
-
SHA256
f51604a2b270571fbc5af243c68db6640911ebd44f86f12ea538b82eb076af09
-
SHA512
09af1b4cff221a63a809bf91d4c5013e6565ab68651d8ef20338eda196bdc72c773b46407d08228cb0cd524d91ca5797898cf6f06b85ee059f8445a6fe7dcce1
-
SSDEEP
24576:Sqz7CBlwZM84pWXVav9MkS4/izRXTOkMtrIceMaFPjkjD29:Sq/ZM84pXv9MVakOElMaFLk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e286dcc37952f2d6818ce9d22e23707
Files
-
1e286dcc37952f2d6818ce9d22e23707.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ