Static task
static1
Behavioral task
behavioral1
Sample
11e6e847dc7ff0db8e00db31c7126ed1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11e6e847dc7ff0db8e00db31c7126ed1.exe
Resource
win10v2004-20231215-en
General
-
Target
11e6e847dc7ff0db8e00db31c7126ed1
-
Size
88KB
-
MD5
11e6e847dc7ff0db8e00db31c7126ed1
-
SHA1
9efb206376e2f2992db4453c7024055eb6ecf234
-
SHA256
8b72686d7a7aee87e7f8b1f47b24d43b1e897b8c85e56b305a6b1adca8463d43
-
SHA512
5116af2b3e7b6aaf3ab502086f71e4e05aafc2ef7fd8d2fed466e41a61122663955c22c8bee5ea76713fef57fba1678f9eb91959ea1b074ffa8e682e4fa73c15
-
SSDEEP
768:iVHMuBAx9esqLz8OG3V0esRqEZeL0K1pEdYQ1zlhlbsRohSMKo75ZImxJDKch2/W:ksuBAxgzq4RqXLKSQdTlK+5JJmchUZs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11e6e847dc7ff0db8e00db31c7126ed1
Files
-
11e6e847dc7ff0db8e00db31c7126ed1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE