Static task
static1
Behavioral task
behavioral1
Sample
1ed23d71188bd3202b4f499f3bf5860d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ed23d71188bd3202b4f499f3bf5860d.exe
Resource
win10v2004-20231222-en
General
-
Target
1ed23d71188bd3202b4f499f3bf5860d
-
Size
71KB
-
MD5
1ed23d71188bd3202b4f499f3bf5860d
-
SHA1
68ef27961bb82de575ec5ee86752788d1fb4617d
-
SHA256
d3aeabdb147858ff586d48547811174471cf6f809d4b750320924c6c14a62c74
-
SHA512
4f3d0923b79bed0cb37f770e6c9fc6e51ae182145028afcd72f3795a514a96d694366b9f539cc8c04d4a7b0ab4da4e54f05256af290b716edd078c0b65ca2b65
-
SSDEEP
1536:bOY499DAGY34wtgAB7vz0weswbpvBcM5dvXHIZfWcXv7oFjoT:b54DnY31qAesSJB1fIZvv7T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ed23d71188bd3202b4f499f3bf5860d
Files
-
1ed23d71188bd3202b4f499f3bf5860d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.misswe Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.misswe Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.misswe Size: 15KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE