Static task
static1
Behavioral task
behavioral1
Sample
11a38f4233f386e96f96f15703ff583f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11a38f4233f386e96f96f15703ff583f.exe
Resource
win10v2004-20231215-en
General
-
Target
11a38f4233f386e96f96f15703ff583f
-
Size
36KB
-
MD5
11a38f4233f386e96f96f15703ff583f
-
SHA1
7ed1250d549268e5978339b2e1e95d9521cd28f3
-
SHA256
2c297ea0c3244206c9e10defa41893dbb27a0ad4f522e9021402a96918d16ebd
-
SHA512
7b2d9fcfa7cee9f59fef0cf050bda3c5155e732049813fb37fad347fc0b0fa16e3c0ee21827e1b4ac11261f54d2ba55de85544e666e758e0b95e6288755c80a6
-
SSDEEP
768:KAOgrns9p+hoerV8V2g1eL/4SXlK3/jPFEonA2IBKK/4f3uCQA:zOY4berVnL/HXlK3/bnn7Ko3QA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11a38f4233f386e96f96f15703ff583f
Files
-
11a38f4233f386e96f96f15703ff583f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 474KB - Virtual size: 474KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 40.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ