Static task
static1
Behavioral task
behavioral1
Sample
1f2e3a312863051369af31ec9cf1ecb3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1f2e3a312863051369af31ec9cf1ecb3.exe
Resource
win10v2004-20231215-en
General
-
Target
1f2e3a312863051369af31ec9cf1ecb3
-
Size
1013KB
-
MD5
1f2e3a312863051369af31ec9cf1ecb3
-
SHA1
bbe1be8c802d7ffacf0ad4f63cdc7393ca5c7473
-
SHA256
da44b38237f38c36650d7e675ab9fc5ecd44abdcea4e2398ac22949b8a462611
-
SHA512
92a46b9560da33f22452d016418cfeaa27e3ad12b49d1ac2643c2b492f5392a29ede4d6780103e5ef0bd5f12e6d6b876a8ac59367e0a3d5ffdcd3bc5ee7bda2a
-
SSDEEP
24576:ZsJ8EaWRlKOgdbido7U9/i1ahozF3gGCW0CkI03:ZsJhXCOgdd7si1j9vf03
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f2e3a312863051369af31ec9cf1ecb3
Files
-
1f2e3a312863051369af31ec9cf1ecb3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 455KB - Virtual size: 455KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ