Static task
static1
Behavioral task
behavioral1
Sample
1f67dd4a1e987d6f8a582d6c083c45d8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1f67dd4a1e987d6f8a582d6c083c45d8.exe
Resource
win10v2004-20231215-en
General
-
Target
1f67dd4a1e987d6f8a582d6c083c45d8
-
Size
192KB
-
MD5
1f67dd4a1e987d6f8a582d6c083c45d8
-
SHA1
0e3f8b475ff06ebf07262f0b3ac4bdbfe140447b
-
SHA256
cabac8322e90b063c2b72e31accaff25a8a463889486de69e57248474af07d77
-
SHA512
a3a66f5f71f60f8733cf4a617ca27c0f4111a252d7ee29e3dc1c52da35e71e4f41298f09c7c4a565a69eaebcdfa4898ff9ef7afaec98416dac9722747b32b3d9
-
SSDEEP
3072:M4ThiMQ/qHAL44ZXXfjBnVBLQ+BF7D9VFCmozxQCyfTxpZz/kT:MH7/913DQ5wfTxpZA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f67dd4a1e987d6f8a582d6c083c45d8
Files
-
1f67dd4a1e987d6f8a582d6c083c45d8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fs Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ