Static task
static1
Behavioral task
behavioral1
Sample
1e895b8ff8b3314e8e2c6380d57bf7bd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1e895b8ff8b3314e8e2c6380d57bf7bd.exe
Resource
win10v2004-20231222-en
General
-
Target
1e895b8ff8b3314e8e2c6380d57bf7bd
-
Size
129KB
-
MD5
1e895b8ff8b3314e8e2c6380d57bf7bd
-
SHA1
64bde9984c433583e17d946edb0eddd70ac3ec54
-
SHA256
432b7f72586d5db9121b1000f39f9836c09d903eb179257b7c11cfe755f83fec
-
SHA512
597507ba57bec6385dd124e5a93c01062677a81f285537510b850d9ea8dc4ab289ccabff344d7ae8155645a9433393a8c1c501346ca4ba641b12d22ccedcab6e
-
SSDEEP
3072:pg7puGNNv31100b8IZaBWdV5Ek+CyBEApajsdhSsJ:pUlL1068IMBzkABEGwsfSsJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e895b8ff8b3314e8e2c6380d57bf7bd
Files
-
1e895b8ff8b3314e8e2c6380d57bf7bd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
xcirw5j4 Size: - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nxju4ec Size: 124KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qfj2j7ag Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE