Static task
static1
Behavioral task
behavioral1
Sample
1f829b0f5c6271c2a0060a04a0dc866a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1f829b0f5c6271c2a0060a04a0dc866a.exe
Resource
win10v2004-20231215-en
General
-
Target
1f829b0f5c6271c2a0060a04a0dc866a
-
Size
57KB
-
MD5
1f829b0f5c6271c2a0060a04a0dc866a
-
SHA1
f9da3c7551328f5407e477c8e5e564e9ec34d895
-
SHA256
a02cd49afc6ae22cefbbf1e0cc34ff1e935b22e41950031233a727e84cdb8ef2
-
SHA512
3d470c28d4d8e10f9595e280f9d3de329aa3b124ae9865484fad381b374fc5c0c31964753ac72c284235e9f74846ca0a32c2afab09e64503ec9280b387b712e8
-
SSDEEP
1536:S4ayStPeg9zeS8B+aKmLHn8WqQs5MnPNt4G3l+vK:S+SAJXFqQsqN51+v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f829b0f5c6271c2a0060a04a0dc866a
Files
-
1f829b0f5c6271c2a0060a04a0dc866a.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE