Static task
static1
Behavioral task
behavioral1
Sample
1d789450b3c0f68e3566421c9d7bc6cd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1d789450b3c0f68e3566421c9d7bc6cd.exe
Resource
win10v2004-20231215-en
General
-
Target
1d789450b3c0f68e3566421c9d7bc6cd
-
Size
3.2MB
-
MD5
1d789450b3c0f68e3566421c9d7bc6cd
-
SHA1
0dc9a50bd2c678ef580ce0a1baa85cdb7a729047
-
SHA256
175bbc5dbca825cfba73f65f58a71836ba4e33f5a7faca20c4b48c912acb2b0d
-
SHA512
1521da3c9cf31aa72781425be63b3d44b0ed3d25f22230874dfb2ccc1533ba4448790597791c061dc3f13d1e5d3fc88190080c61c7d724a2eaeca5cd820ccda4
-
SSDEEP
49152:9/4MnYYJ2ZhqSGLHkJEMOIgekVc9IW1dXgfC/MHmgWEp6:aIDQqekVc9IW1dXgfC/MHmgxp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d789450b3c0f68e3566421c9d7bc6cd
Files
-
1d789450b3c0f68e3566421c9d7bc6cd.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c2r Size: 512B - Virtual size: 260B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ