(=_______=)
Static task
static1
Behavioral task
behavioral1
Sample
1e90bd3796611d96c7228912263cc04a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1e90bd3796611d96c7228912263cc04a.exe
Resource
win10v2004-20231215-en
General
-
Target
1e90bd3796611d96c7228912263cc04a
-
Size
76KB
-
MD5
1e90bd3796611d96c7228912263cc04a
-
SHA1
1b9887d4451c6935fe4bbb01f1b096fd0a9522c1
-
SHA256
79c31c2d7aa9909b5c5632562f7da009092b2e1b3be548957d3c0d1f814b5870
-
SHA512
d8e32a53b0ab093f9b809008eeb3d45b1b05246384910b815a2193c67c53f146030fba529b1d37b391c42d3b92a8502c0841406d4aed876e5b8824bf93ab8ad0
-
SSDEEP
1536:DWeFrh61Xvlz/5RInOHnCbPi8k6J4tx9kLzvfVWCbx0XxHE:ie92XvV/5I4CjQ9txWLzAu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e90bd3796611d96c7228912263cc04a
Files
-
1e90bd3796611d96c7228912263cc04a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 285B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 71B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 452B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ