Static task
static1
Behavioral task
behavioral1
Sample
106815ddc0673fe1b79895e3d507ec2c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
106815ddc0673fe1b79895e3d507ec2c.exe
Resource
win10v2004-20231215-en
General
-
Target
106815ddc0673fe1b79895e3d507ec2c
-
Size
2KB
-
MD5
106815ddc0673fe1b79895e3d507ec2c
-
SHA1
7ecdee2dfbccf1998334860ed7544202eba4b999
-
SHA256
7a2646393e437b70861321b8c2bd50c4274d349d8641088f560ceb68dabefc73
-
SHA512
2d438951a47af7c81e5f5736abd3f131119551c20476c80985d7306e039f35becdf1170f98eaaba2947a3f0c533c5fc9bb663edbc97b53d3e986c084de66b15d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 106815ddc0673fe1b79895e3d507ec2c
Files
-
106815ddc0673fe1b79895e3d507ec2c.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ