Static task
static1
Behavioral task
behavioral1
Sample
1d3c8d28dde12d3f3ff8d8e9f4ed5d28.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1d3c8d28dde12d3f3ff8d8e9f4ed5d28.exe
Resource
win10v2004-20231215-en
General
-
Target
1d3c8d28dde12d3f3ff8d8e9f4ed5d28
-
Size
882KB
-
MD5
1d3c8d28dde12d3f3ff8d8e9f4ed5d28
-
SHA1
bac2e6ba8f6aaa6d45732d31f897a4c1b543e419
-
SHA256
096674bb279559b6574918ae7c7f6f18cdc4b5916ba32b7c020665a7573ead9f
-
SHA512
cb051598216bc32f972d21abe7fea1f9384a093402dddb0c5267807e00297bf43c01a6571425f754710bb159d51e5784c28383f9f5226c12f258f2bb24b76ccf
-
SSDEEP
24576:Jl/B6mldxPq6u40Fk+H1oqEUyB0ukArpmZZDo8rr:30mlUFkMP4ZdrpmLo8X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d3c8d28dde12d3f3ff8d8e9f4ed5d28
Files
-
1d3c8d28dde12d3f3ff8d8e9f4ed5d28.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 852KB - Virtual size: 852KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ