Static task
static1
Behavioral task
behavioral1
Sample
1e1e5b0eb936caa77dd5608d4f8e77cb.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1e1e5b0eb936caa77dd5608d4f8e77cb.exe
Resource
win10v2004-20231215-en
General
-
Target
1e1e5b0eb936caa77dd5608d4f8e77cb
-
Size
92KB
-
MD5
1e1e5b0eb936caa77dd5608d4f8e77cb
-
SHA1
d82258cf0b51694abfaaaadf056284bcd28d086f
-
SHA256
841de0c51e94e8da094164d8da26a1453bfe5e0428a9b779b6186bdc5a9f48e3
-
SHA512
295abe06f573f2a03dd0307926a9fc0fedb2a6fef4fce000ff823b917f25035029d1ff54bb7d650eea4536270bb0d2886a4f82db3532139fb310331dfc770ecf
-
SSDEEP
1536:yi9MAKYKn54IOiGMJYqzhuOuOH54hOnWRwtBwgHOUuvbmcr3Lmkuq0UtVp8j:yiOCK54Ie0oOvZ4hFRwtSqOvbmcrydEY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e1e5b0eb936caa77dd5608d4f8e77cb
Files
-
1e1e5b0eb936caa77dd5608d4f8e77cb.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 87KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE