Static task
static1
Behavioral task
behavioral1
Sample
14d9b08516a598e9e3f8b2becc8e828d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
14d9b08516a598e9e3f8b2becc8e828d.exe
Resource
win10v2004-20231215-en
General
-
Target
14d9b08516a598e9e3f8b2becc8e828d
-
Size
2.8MB
-
MD5
14d9b08516a598e9e3f8b2becc8e828d
-
SHA1
5491cf44e30178492f926db92997358e5331a10e
-
SHA256
e1e220a12f2e16a7e554fe7b3a34ec3835caeadf4a417ada2f75efc55ddec1f5
-
SHA512
772b1c300eeafe489dd24c9653ab437e3222f5e36b25fa7aabf0c1355cbaf319c3946e4de896b84d5de5a1e839b670f49e31113b7ff99064af3b5c4dab753475
-
SSDEEP
49152:2xznLfUn2oJdXN0BMOwLloBrugz2RAR5FeA6w:d1JdXN0B7+sj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14d9b08516a598e9e3f8b2becc8e828d
Files
-
14d9b08516a598e9e3f8b2becc8e828d.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c2r Size: 512B - Virtual size: 360B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ