Static task
static1
Behavioral task
behavioral1
Sample
1fa5275c47c25a1231761f454503e1a3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1fa5275c47c25a1231761f454503e1a3.exe
Resource
win10v2004-20231215-en
General
-
Target
1fa5275c47c25a1231761f454503e1a3
-
Size
50KB
-
MD5
1fa5275c47c25a1231761f454503e1a3
-
SHA1
5bf2d427c368b5d20c6a52550f4fd03bb958dfcd
-
SHA256
7290591a16a58299b1ce8a9f2021d7e4df02ed244c44f0c0b13006da05d2572d
-
SHA512
0a513fd22fe8ca2da73f11124d9eff8fa21d2f00d2a9bb04db788eee295a8326bdabd2fe574c24088901f4a372f0e858a2264800ac47dd413ca8dc1cbdb3c699
-
SSDEEP
1536:MHCwJXwu771gok3CZ9WRn+Yf+SznCHe63+l002De4yDnzDnrDnrDnrDnrDnrDnrD:QPXwun1MSZ9WH+9fw2KFfnnnnnnnnnnn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1fa5275c47c25a1231761f454503e1a3
Files
-
1fa5275c47c25a1231761f454503e1a3.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nah Size: 653B - Virtual size: 653B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ