Static task
static1
Behavioral task
behavioral1
Sample
1147beb884288858ff489c4279c293eb.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1147beb884288858ff489c4279c293eb.exe
Resource
win10v2004-20231215-en
General
-
Target
1147beb884288858ff489c4279c293eb
-
Size
118KB
-
MD5
1147beb884288858ff489c4279c293eb
-
SHA1
8a592635b2b794fd90fd114851460dc3078c515b
-
SHA256
97931980765cce2d6bb26dbf109ad9a341f48127807b36ca36e835c88dab27a7
-
SHA512
20ed5e1ba1cfa377b2e599f7b8c1c2b6c2f9f3add5747fb7a9761ef14ca48d0d88e5e459165eac451eee34e394ae1f211e8d7cbc7d1816d153a960c9c47b4059
-
SSDEEP
3072:dPUeu81ujgAyaIn75RgUcvgu6jw+lkUVQtDbJpM2u7xqog:zukuhTInMiwCkJG2cg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1147beb884288858ff489c4279c293eb
Files
-
1147beb884288858ff489c4279c293eb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
$ext Size: 9KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dat Size: - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ