Static task
static1
Behavioral task
behavioral1
Sample
1404655851a467cf49ac91b02699328a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1404655851a467cf49ac91b02699328a.exe
Resource
win10v2004-20231215-en
General
-
Target
1404655851a467cf49ac91b02699328a
-
Size
350KB
-
MD5
1404655851a467cf49ac91b02699328a
-
SHA1
89918f1c0fb2e55efad821a4142b7e9ffa35c8b6
-
SHA256
163aa1e8408b8bacd328b66de960cb1eba5cb5097b62b8a38f413756865a5f40
-
SHA512
a52e18bc076b5ecf81bbb2815ca9d2ba2aeb2632281b462027ee97480329fea28a4d8473ffc2a72d17919028e2dcf20e30f9a5d9328e1c8a17344c67c22fa49f
-
SSDEEP
6144:9McTxxjxOAl1PgoICvAjg5F8dOy7V+9Qs7Ui93QEPK:9xxxjxOAlFg8k+8cs+9/Zg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1404655851a467cf49ac91b02699328a
Files
-
1404655851a467cf49ac91b02699328a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 19KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yvs Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE