Static task
static1
Behavioral task
behavioral1
Sample
1e7c6f534055a082946beacd3a88a286.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1e7c6f534055a082946beacd3a88a286.exe
Resource
win10v2004-20231215-en
General
-
Target
1e7c6f534055a082946beacd3a88a286
-
Size
277KB
-
MD5
1e7c6f534055a082946beacd3a88a286
-
SHA1
c34cf323ceff28c19247a856842beb9802e0e9db
-
SHA256
33c82fc1a18bc5d6649326129d3d1bbd165a803c5a9c4dfaf53c372167fcc274
-
SHA512
8929b83c88b5170ba651ca109f5376309f64079542ce1de24700eea357f2b5ec60afcaae2e6e4a68ec18ae2e89b81475b282d29a43e8265ab065181dc7a9f1e0
-
SSDEEP
6144:E70qPZXii8OkjFP/VQCS3XdYoj5WqmodtSfp26h8EsWxgrFtTaKw+G1L:Tqxyi/kh1iYoYqmodtwp3zssgr7bU1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e7c6f534055a082946beacd3a88a286
Files
-
1e7c6f534055a082946beacd3a88a286.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 780KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 271KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 157B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp0 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE