Static task
static1
Behavioral task
behavioral1
Sample
1e3b33cd588967d5a73dc17a7d56e901.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1e3b33cd588967d5a73dc17a7d56e901.exe
Resource
win10v2004-20231215-en
General
-
Target
1e3b33cd588967d5a73dc17a7d56e901
-
Size
151KB
-
MD5
1e3b33cd588967d5a73dc17a7d56e901
-
SHA1
78b7e6c59ed6a8fc6f6579ca741f5df065f5f553
-
SHA256
c251e41ace16d333ca13ea0a4e57a897f54d5b11ba976318bb6c144728cf2616
-
SHA512
411b461c41360ddbebe368b532c0bee514507972d843841082b21068ed6d44bcd1f31ad804102ab8146669ce4044240435f203142ab0ed6e8d8da93ef85ad06f
-
SSDEEP
3072:7TckoauN1wPdDkT2hNMBQHuxUT/oUp4cKH+pfzRt9RTwXoSXjf7:7FXuNGdDkTXjgbp7RVTwXoa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e3b33cd588967d5a73dc17a7d56e901
Files
-
1e3b33cd588967d5a73dc17a7d56e901.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 150KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE