Static task
static1
Behavioral task
behavioral1
Sample
1189d96b6e5170ab7006fb832c1d825a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1189d96b6e5170ab7006fb832c1d825a.exe
Resource
win10v2004-20231215-en
General
-
Target
1189d96b6e5170ab7006fb832c1d825a
-
Size
24KB
-
MD5
1189d96b6e5170ab7006fb832c1d825a
-
SHA1
ad4ec3bd9c2430a3814d192e3188880aa53f247d
-
SHA256
b26c790745236a5ea630cbc4bc473a2d86550a0524aebc3f5c7579df3f703299
-
SHA512
a1d4797d3ae8fd00fc28d1995cfc5d0f728c285273245f66994d5f4dd85d9914c6e652dce74b1adefca89bb5c6e02b2c46d9b527ab0194c60a989ff0ae26bd82
-
SSDEEP
384:E5tHGOuX6qJj23yaw9Q2N7Z6zChjp7Ly8lJ0d3oOjdrAd1x5ShNwyt:EXHKOwm2CuhjpPyc0d31jZAd1HYw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1189d96b6e5170ab7006fb832c1d825a
Files
-
1189d96b6e5170ab7006fb832c1d825a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
w$~_0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
w$~_1 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
w$~_2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE