Static task
static1
Behavioral task
behavioral1
Sample
1df3152e3cfb3ce81ac5fb767a7861bc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1df3152e3cfb3ce81ac5fb767a7861bc.exe
Resource
win10v2004-20231215-en
General
-
Target
1df3152e3cfb3ce81ac5fb767a7861bc
-
Size
70KB
-
MD5
1df3152e3cfb3ce81ac5fb767a7861bc
-
SHA1
012f9566d0d6bb3f1a761e39d91914f74abf1f32
-
SHA256
cc1b6afc0b5f6a6cd146eff0fc2de4c7a53673b79fe98350e8aa21ad9730bfc0
-
SHA512
713ca4eb150aecee3a195a7a160882fafb36bd0437884437397ae5f78147d7f3e9efa8c760946a735581f36fc17c8634fd2a07e6485c64b032c21588e5db8e24
-
SSDEEP
1536:Q+TBEj9cA3dmssmzZpn+ox819jc2cs3JmijC5K:Grms5LnETjc2XNC5K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1df3152e3cfb3ce81ac5fb767a7861bc
Files
-
1df3152e3cfb3ce81ac5fb767a7861bc.exe windows:4 windows x86 arch:x86
647b2d25b4821905b4195ff7a6455b54
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
Sections
.text Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ