Static task
static1
Behavioral task
behavioral1
Sample
1de1ef67fc61c668a33f0e24ab291259.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1de1ef67fc61c668a33f0e24ab291259.exe
Resource
win10v2004-20231215-en
General
-
Target
1de1ef67fc61c668a33f0e24ab291259
-
Size
409KB
-
MD5
1de1ef67fc61c668a33f0e24ab291259
-
SHA1
8d70020ae9b09e04ab952c6fc0bd755fab4445a0
-
SHA256
8cb6a77baecdec7055b92cb92e227fb59f8a53bcacfac6260a3af8d167b9885d
-
SHA512
74659623803f73e061298110cf537e7d0b1d6be753217f2597b7769cc392d263a348f83ce8e68e34dbf8498dbb8584dc4899f172fceff482ef1cff2468e5b373
-
SSDEEP
12288:7zwjFa8FPTPEvPtD9MSEG5j9QOlKVdYs1KHcUsay:7zaa8t2thfDJLcT3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1de1ef67fc61c668a33f0e24ab291259
Files
-
1de1ef67fc61c668a33f0e24ab291259.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 173KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ