Static task
static1
Behavioral task
behavioral1
Sample
1d7285a8903b14f50bae8c0bee2a500e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1d7285a8903b14f50bae8c0bee2a500e.exe
Resource
win10v2004-20231215-en
General
-
Target
1d7285a8903b14f50bae8c0bee2a500e
-
Size
1.4MB
-
MD5
1d7285a8903b14f50bae8c0bee2a500e
-
SHA1
055f6912aa499fbc3cf33ad8a6272edcc5edadcb
-
SHA256
f9b7208ac44f3c26f7dcc4e80592c1e836e1779861113c6cfb8eba00ea2ef990
-
SHA512
a51d90d1680e77897d63b6f4e5fa01b3996ffaed4cdc45cc0c922e48ae97f143d5314534c5526da52d69568940403086f1fadbee1d699d35320f6a8e563d0c6f
-
SSDEEP
24576:9jkvtfj3AIgU6yYgtbR6JwDvVxTqkIsS7IYj7k6aKLoQx2K322w+:qvZ3AIP6WE2vwIYha8xzm2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d7285a8903b14f50bae8c0bee2a500e
Files
-
1d7285a8903b14f50bae8c0bee2a500e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 369KB - Virtual size: 816KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 19.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.x01 Size: 1.0MB - Virtual size: 19.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l Size: 12KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE