Static task
static1
Behavioral task
behavioral1
Sample
1f4beba891a99369a7a1d837712c24d7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1f4beba891a99369a7a1d837712c24d7.exe
Resource
win10v2004-20231222-en
General
-
Target
1f4beba891a99369a7a1d837712c24d7
-
Size
45KB
-
MD5
1f4beba891a99369a7a1d837712c24d7
-
SHA1
1fdda1451df64b5666801b27666f50b1d17d7323
-
SHA256
3198dea799249a373f8e4e462bb3d3dd18fc1987098e3cc4dbc39f683da9dbf4
-
SHA512
5e066ef69183712c08ed94684679e2619158aa1b07d22d7c2f6a72a6a53e2782b2bf5b73c395dd5e61121d11a553dec1d137c1e9ac5e6f14b6d743b974bfface
-
SSDEEP
768:KGQm2hRG2LqRBztSim3OXygKEBl1Irv9ACTdpxFO+wyMYn5:KGN2h8/3tSim+XhNf1Irv9nxTwi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f4beba891a99369a7a1d837712c24d7
Files
-
1f4beba891a99369a7a1d837712c24d7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE