Static task
static1
Behavioral task
behavioral1
Sample
11d8c74e1954289c0365423df1f3ffe1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11d8c74e1954289c0365423df1f3ffe1.exe
Resource
win10v2004-20231215-en
General
-
Target
11d8c74e1954289c0365423df1f3ffe1
-
Size
1.5MB
-
MD5
11d8c74e1954289c0365423df1f3ffe1
-
SHA1
7a9ee6966c6702fd616c0bf8535f7b90f564fc69
-
SHA256
b25a37c2376ac121a3dd8d345eb30029ffa907e72776a0cd58c59129eb90649a
-
SHA512
be89b8703d0b13db342ed574c39194ee49cc87058a4f38f1aba0c41fddae472edb3f6c11da0d2440488964675398f03b0f835ccc5b5421337ae02cb33e2208e8
-
SSDEEP
24576:SBqN+V8tgJd8UfH8bZ54GXQH8bmQfbP9zWm8sW:SBqN+V8tgJd8OIHQmfbP9zWmTW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11d8c74e1954289c0365423df1f3ffe1
Files
-
11d8c74e1954289c0365423df1f3ffe1.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ