Static task
static1
Behavioral task
behavioral1
Sample
101ec8b7af5a798b981efa5e91feabb4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
101ec8b7af5a798b981efa5e91feabb4.exe
Resource
win10v2004-20231215-en
General
-
Target
101ec8b7af5a798b981efa5e91feabb4
-
Size
264KB
-
MD5
101ec8b7af5a798b981efa5e91feabb4
-
SHA1
30543a2f0dd20a2977baff5266062c829d7d1bfb
-
SHA256
27a4f1d9edcb243e3043492679b4a8b044ef29a300a1bcad345d687c7c8a4831
-
SHA512
35e32cc0a033f8e7a3fdd70e3f92902c9fce31cb941407e4ec034f8134059e436eda749b7e96b5ba3db863ca78d06c0e071904b015e231a1f0067068a1086b1a
-
SSDEEP
1536:zcq9QJRksrVGX3R8sFHTgBysh676W6fxKX8Oqhy3k9JTDc2:9kRHrcX2sFHTnx69pI/qhX9JTw2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 101ec8b7af5a798b981efa5e91feabb4
Files
-
101ec8b7af5a798b981efa5e91feabb4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 13KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ