Static task
static1
Behavioral task
behavioral1
Sample
1dc2a9ac8abdb8cc4fc138300f6f36e0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1dc2a9ac8abdb8cc4fc138300f6f36e0.exe
Resource
win10v2004-20231222-en
General
-
Target
1dc2a9ac8abdb8cc4fc138300f6f36e0
-
Size
3.0MB
-
MD5
1dc2a9ac8abdb8cc4fc138300f6f36e0
-
SHA1
86be5950218d98f75b343b0e1ca84dc3941d0b43
-
SHA256
d94c2f1a6bb4fe802ec0c0c8d53d11cbe9e685fd233f4b7962babf22bd3a65d5
-
SHA512
8b8b0599803524f77962a37d7440c13628da884e3ad6e99d6e3f70f420a5cb8507490b40554fac7026f610791f7d336e9e0dfddb5e8213af4886022668c4a05e
-
SSDEEP
49152:Sqzq6CIabjKoh9WUrOO53RTqtighKPgssSt2gUZqhaK6zbfqdl:wIabjKoh9WUrOO53Ahv7Stix
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1dc2a9ac8abdb8cc4fc138300f6f36e0
Files
-
1dc2a9ac8abdb8cc4fc138300f6f36e0.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ