Static task
static1
Behavioral task
behavioral1
Sample
1fbb9b3f1411fbad9694bb4edff2789e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1fbb9b3f1411fbad9694bb4edff2789e.exe
Resource
win10v2004-20231215-en
General
-
Target
1fbb9b3f1411fbad9694bb4edff2789e
-
Size
124KB
-
MD5
1fbb9b3f1411fbad9694bb4edff2789e
-
SHA1
a8f7bffa4b0f05e1b34ad32e3e36f202be05b974
-
SHA256
2734633ff0d16a01bcbe9afb51bd9140bf59f9cb4c6fbf6af8ecffecf50457f6
-
SHA512
cbd6f1a6a6d9e8267eb9a3b0c5e07f93e2a615a5b0b84e9fa0f86e91fcbb8805a01bf514151545454d421e3c62e289ca6162a3d17c55a7da9e0aadfd7c31096b
-
SSDEEP
3072:vNhHNNcBByxUDf38hlK4gk7uGLgXo2/JODp:vXjSBGUDfMTKvk1ohJk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1fbb9b3f1411fbad9694bb4edff2789e
Files
-
1fbb9b3f1411fbad9694bb4edff2789e.exe windows:4 windows x86 arch:x86
a53f732e1bbd70e2b3217e8d53ce6afb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
Sections
pec1 Size: 75KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pec2 Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pec3 Size: 1KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE