Static task
static1
Behavioral task
behavioral1
Sample
1ff8151824f235ea3ce1f53a8add362d.exe
Resource
win7-20231215-en
General
-
Target
1ff8151824f235ea3ce1f53a8add362d
-
Size
10KB
-
MD5
1ff8151824f235ea3ce1f53a8add362d
-
SHA1
2ee9d5db2453ecac6aaef363d25f66652ef9d600
-
SHA256
106851e1a63a12975d4584527ebbc0cc97fb9f4295047122417159d22db002ba
-
SHA512
9d1b168d30ef01f01493c45a7e241e992d2e11428b059031e601f061e10ba2acb88b854dc2ae021d180f4bc099fb6e849b7d229ea4266741f37925ed0b744fbb
-
SSDEEP
96:KMh6LhYfa2y2WU5+HcE2SYlnlYJnLLPL0KffATv1r5RXmmoiSVA7JGEQTu:7uo5rV7nlYJLLLT4nET6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ff8151824f235ea3ce1f53a8add362d
Files
-
1ff8151824f235ea3ce1f53a8add362d.exe windows:4 windows x86 arch:x86
57fd82bd73425175c4203d703db3f165
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
msvcr100
_isctype
mfc42u
ord6582
ole32
OleFlushClipboard
gdi32
ord1002
GetTextMetricsW
shlwapi
ord8
rpcrt4
TowerExplode
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.l1 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE