Static task
static1
Behavioral task
behavioral1
Sample
11bc1210231ee5fe72e3daa44f270a63.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11bc1210231ee5fe72e3daa44f270a63.exe
Resource
win10v2004-20231222-en
General
-
Target
11bc1210231ee5fe72e3daa44f270a63
-
Size
2.9MB
-
MD5
11bc1210231ee5fe72e3daa44f270a63
-
SHA1
801674215b49be6ac58282fc6ab4989e24afaba9
-
SHA256
cee3326d41da3e837ead100f870978f68b21ba528fbc3de1eea7bcb89290564e
-
SHA512
94981b4abe2f909e347d0f7a37fedd59204ea2d452ebe09eb07f7d40af75fc1834847d18dc02602d0d090177c5a3e7e58297084dbaee486b5d58e91a3a650277
-
SSDEEP
49152:TsBt20M2t/CPEgodW7lGNj1GdTunsILiYhdi8TUctRsIyXaF+iju9L1m8Axj:wrxht/c1cN5GluNVTUMoqPu9cr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11bc1210231ee5fe72e3daa44f270a63
Files
-
11bc1210231ee5fe72e3daa44f270a63.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: - Virtual size: 10.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE