Static task
static1
Behavioral task
behavioral1
Sample
1ea406f65ff2c8079ea3a486a00f566b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1ea406f65ff2c8079ea3a486a00f566b.exe
Resource
win10v2004-20231222-en
General
-
Target
1ea406f65ff2c8079ea3a486a00f566b
-
Size
214KB
-
MD5
1ea406f65ff2c8079ea3a486a00f566b
-
SHA1
dca795a4f39bc4fee9d56d05613e83997c1c0f9f
-
SHA256
30139e5e4d9250dffa374c7b073bbab29c968def6af9b81f6902f595b100fc00
-
SHA512
629c90ab7f45edfd74311a7c053c8df311a2685130ee457b8af7377a976c7510e1f664a4ed44db779e999f07e2fef7f400b102a6934214dc8df340e561896941
-
SSDEEP
3072:AwwUbERIK5g/BTrlUPT7OFL6Y5UwRHuGdJwTvLHRyGzIr8yoWjYW:Axb4VKvOd6YBugGzI4yoWjY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ea406f65ff2c8079ea3a486a00f566b
Files
-
1ea406f65ff2c8079ea3a486a00f566b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE