Static task
static1
Behavioral task
behavioral1
Sample
1d208232e44fb04d0697351f9c6c68b8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1d208232e44fb04d0697351f9c6c68b8.exe
Resource
win10v2004-20231222-en
General
-
Target
1d208232e44fb04d0697351f9c6c68b8
-
Size
43KB
-
MD5
1d208232e44fb04d0697351f9c6c68b8
-
SHA1
ff8a6e88d568e130c1173f233a3b6a80e769cd8d
-
SHA256
1c5b45b31bc3428b4825c2b234a38076695949052f85af0dc0949a3d3aa3f629
-
SHA512
d6a94c7f8242a4104e3760285479937a04ae8c38ad2ee55eade492d26c84eeb7e0b42a233d5a5d429b869cbccb7aca9b0d41d42df34d0d87eb56109105d7fa13
-
SSDEEP
768:0XZi64oM++nlBn0WzF3Jn2oFt40IonRf47YYF97wBQxzTLad:0XZws+Dn0UrPhhRhY/wBEzTLq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d208232e44fb04d0697351f9c6c68b8
Files
-
1d208232e44fb04d0697351f9c6c68b8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
=##0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
=##1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
=##2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE