Static task
static1
Behavioral task
behavioral1
Sample
1423a868390354d10e962348e58e9d9e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1423a868390354d10e962348e58e9d9e.exe
Resource
win10v2004-20231222-en
General
-
Target
1423a868390354d10e962348e58e9d9e
-
Size
385KB
-
MD5
1423a868390354d10e962348e58e9d9e
-
SHA1
e55032a769b0d1826d0b03520e6817308de69d2b
-
SHA256
7e91a5aa9082e80b05d8a8073aa381e356034d3b0bade19970111a1e98819341
-
SHA512
eef174d34b5c977f3347d769da553dd765b39a7ac1b02d329464514d11d1782a61a24819df1736fe345dc4f62ac04a5b2ccf2c7514246cc6dd3493a2c152588e
-
SSDEEP
12288:tuKywlVDGPP085oajCjwVtNLEIuW3aQG8snXB:36Pc8eUJVtNLEIuWK/8sXB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1423a868390354d10e962348e58e9d9e
Files
-
1423a868390354d10e962348e58e9d9e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ