Static task
static1
Behavioral task
behavioral1
Sample
1df58450ecf3eec5063e151afb2517fd.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1df58450ecf3eec5063e151afb2517fd.exe
Resource
win10v2004-20231215-en
General
-
Target
1df58450ecf3eec5063e151afb2517fd
-
Size
49KB
-
MD5
1df58450ecf3eec5063e151afb2517fd
-
SHA1
a0676e598ef618c0e1458040625bb8cfa11477d2
-
SHA256
bf64877ee322eee58f600ee6ba8fddd36c7dbcb76d49a7ae562d4593668ca79f
-
SHA512
c207ee12d6e8677eed488dfa7be62e8c69574a43f5524d015109948c202b5b7d334ea2eb1b64935037874cdd3ceedad306270ec1ea3c02fbea122795583f877b
-
SSDEEP
768:RM6vXHIn3W6z2SXibYPIKLiQZXVHjVRyYLv+OJxy8XBb2ffxUTQKwyIVOrpJG:RMUonmaXi/EZX9yYLxvxksyYpJG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1df58450ecf3eec5063e151afb2517fd
Files
-
1df58450ecf3eec5063e151afb2517fd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 13KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ