Static task
static1
Behavioral task
behavioral1
Sample
1d173eecf57903a64a16c16458d5da64.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1d173eecf57903a64a16c16458d5da64.exe
Resource
win10v2004-20231215-en
General
-
Target
1d173eecf57903a64a16c16458d5da64
-
Size
80KB
-
MD5
1d173eecf57903a64a16c16458d5da64
-
SHA1
5cfd1c12cc42af0df0325393d621737a1c2afac2
-
SHA256
2f00a3a7b945dc0222efdcdf8c231a007d215a2f8c2fa5dbfefba4d8650ed70f
-
SHA512
a662d8822b8b86126aad7de60848f94e0202b74d40faa2e5fb3fbb409bdceafc646f0068a62911d82f119b6be131b3c6d730f8c003de907b200a70279cc97a63
-
SSDEEP
1536:5vvMoOzvvMoORizUPliPsm/gL16ZpQGh6MgHN+PhuLGRb:RvxOzvxOMUMPsgQvTMY+PhGGRb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d173eecf57903a64a16c16458d5da64
Files
-
1d173eecf57903a64a16c16458d5da64.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
JkeJke Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
JkeJke Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
JkeJke Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ