Static task
static1
Behavioral task
behavioral1
Sample
1ff4cba6c02646b90347e83ebd8891a4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1ff4cba6c02646b90347e83ebd8891a4.exe
Resource
win10v2004-20231215-en
General
-
Target
1ff4cba6c02646b90347e83ebd8891a4
-
Size
363KB
-
MD5
1ff4cba6c02646b90347e83ebd8891a4
-
SHA1
961bbc611c9270379c982bcd5a7d0a045420bb44
-
SHA256
7b145566ca46e2e9322378ec5a1ba3550e87accb9f3ea93b5d1b6e4868fd3a3c
-
SHA512
17f9b6c6e68a4bfc4f01be4d28d955208ba2765b6644c6cd4575acf00895e4fffb2c8776ba6e61df33e78ab769edbbd34cc49aa566c747e4080d437a9ef5a376
-
SSDEEP
6144:slum1xNSZo3Nm6wEYgLkEsR42OOgrD6NUa0gks354LYXVgdd6GfBgwg+CT331A0L:kum1xNSzUj2xWa05XYX2d6Gxg+CT3Nth
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ff4cba6c02646b90347e83ebd8891a4
Files
-
1ff4cba6c02646b90347e83ebd8891a4.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
FHFHFH Size: - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FHFHFH Size: 357KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FHFHFH Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE