Static task
static1
Behavioral task
behavioral1
Sample
1fde9195aed9b0ee44ca3da3c37b20e0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1fde9195aed9b0ee44ca3da3c37b20e0.exe
Resource
win10v2004-20231222-en
General
-
Target
1fde9195aed9b0ee44ca3da3c37b20e0
-
Size
85KB
-
MD5
1fde9195aed9b0ee44ca3da3c37b20e0
-
SHA1
88e6befa1112d326bf97868837c0f408437801fb
-
SHA256
c51bf6d0dfa0083f9d9f093b24f7a780d8aea3c341205003e6b1beef2ed2c4c3
-
SHA512
ad970ad58ae7a2031ad9053a9237913c300cc7dba79f0d3e598d996b5865f015647fc6e5bb11752c771e72660017a652dbc85ac73762a69f59366d02b923c6a8
-
SSDEEP
1536:PTqaxQU2outP4Q4KAD6eQauJ3IaylYuf13VQMCGTEKh0G:dxr2n47KAebauJYaylYa1ASEKhH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1fde9195aed9b0ee44ca3da3c37b20e0
Files
-
1fde9195aed9b0ee44ca3da3c37b20e0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 1002B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 956B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ