Static task
static1
Behavioral task
behavioral1
Sample
1fbf3e3a8740274a449e7dbe88ebf533.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1fbf3e3a8740274a449e7dbe88ebf533.exe
Resource
win10v2004-20231222-en
General
-
Target
1fbf3e3a8740274a449e7dbe88ebf533
-
Size
1024KB
-
MD5
1fbf3e3a8740274a449e7dbe88ebf533
-
SHA1
297482a53d7f428e28a6c0d461a7f1f9705ce0ee
-
SHA256
e6e8eeb70e2cebd167ec8d772aed89ea7aa003f183e3f1df2f085b9e27a06f33
-
SHA512
f608515b26ef600df15fa8557f40c113e2688fa67ad6d6115fdce93b39a06b9d851e66184ed7af4db0cc5f88240b52c02dc27cbb955d33b291f0da4fd9545cb3
-
SSDEEP
24576:Gbz4XG32naaifJ85M8kOOj2SkjvgEm4Nc51MNywfn:GbXmaaWVvkj4E7Dxn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1fbf3e3a8740274a449e7dbe88ebf533
Files
-
1fbf3e3a8740274a449e7dbe88ebf533.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 186B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE