Static task
static1
Behavioral task
behavioral1
Sample
1d465ba6ff39fcdd086475f2186df8fa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1d465ba6ff39fcdd086475f2186df8fa.exe
Resource
win10v2004-20231222-en
General
-
Target
1d465ba6ff39fcdd086475f2186df8fa
-
Size
376KB
-
MD5
1d465ba6ff39fcdd086475f2186df8fa
-
SHA1
88cabe093e0a58af8c1175b0374cb3a907eff5ce
-
SHA256
e94a31f931163e9af2d70ecaee462ff28de9ab5c428b043923eeee9e80e2ee10
-
SHA512
530f1ba91a3abb4e9ffe241680917285c17a85e720d5b6d14a05f7c2a6ec194b1ebeaa8993440049eab61c2a8cf23a40ae06085b35949cd0f8e4a24c261177bf
-
SSDEEP
6144:zIHYsZbS31zXqSNQgeiOKnDYVH0pwpMWEmpRBJ1NuUBY+f7zAF11whggaoHofphT:zIVZel6SOgeiOKEVH0ppWfBJ7XBczmRA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d465ba6ff39fcdd086475f2186df8fa
Files
-
1d465ba6ff39fcdd086475f2186df8fa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 948KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 356KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ