Static task
static1
Behavioral task
behavioral1
Sample
1f34e9899b77508259a3e7b76863f9ba.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1f34e9899b77508259a3e7b76863f9ba.exe
Resource
win10v2004-20231215-en
General
-
Target
1f34e9899b77508259a3e7b76863f9ba
-
Size
227KB
-
MD5
1f34e9899b77508259a3e7b76863f9ba
-
SHA1
a1282eb9e8b0baed85faf1d168e36272bfec7421
-
SHA256
e4c741f5a658bd5be3a24fb62c9833ec18fce5df959e58de1aaf1c7df71c771d
-
SHA512
328f3a099613ec1ea477cc9ebb81541c8f22812b024ec90c6a3fb72281cf10f1b1beee95e34ff66bb65b38fad57fa9ee83671573609f3b0dc49f50d1ea9c195f
-
SSDEEP
6144:5orYNUCziXqLllz+5E4MqRrxpq7GFlu2LpSq/C:yrY5G0lw5E4MGxpNXLpSu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f34e9899b77508259a3e7b76863f9ba
Files
-
1f34e9899b77508259a3e7b76863f9ba.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.code Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 183KB - Virtual size: 339KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 716B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 942B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ