Static task
static1
Behavioral task
behavioral1
Sample
1e5d08f33297582a10db5702e3d964fa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1e5d08f33297582a10db5702e3d964fa.exe
Resource
win10v2004-20231215-en
General
-
Target
1e5d08f33297582a10db5702e3d964fa
-
Size
83KB
-
MD5
1e5d08f33297582a10db5702e3d964fa
-
SHA1
ba0cff5eb7694878595bec781a130f4f04dcc6a2
-
SHA256
0b32cb757e053a059a920d82a0b1a165c34e390b0379ea01bfc69ace157bdee4
-
SHA512
79af5f3bb2d5bf51cf1bc423551d7dc4d55f152eab16bdd82f372485ad8a44ca73c657a052c76cd33a0b741debbe8e6effe609c39e0caf1059bcc836368e0b39
-
SSDEEP
1536:49WBevdL5I6JRaPm24X8uYdACcpyYITwS/V8dGuEgTELtzCeHDPaSOhk:49Wud5IIRa+Xucy13idMuReH1Ohk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e5d08f33297582a10db5702e3d964fa
Files
-
1e5d08f33297582a10db5702e3d964fa.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ