Static task
static1
Behavioral task
behavioral1
Sample
14f5847d8f0d645404e1a8ab8d6d5f92.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
14f5847d8f0d645404e1a8ab8d6d5f92.exe
Resource
win10v2004-20231215-en
General
-
Target
14f5847d8f0d645404e1a8ab8d6d5f92
-
Size
124KB
-
MD5
14f5847d8f0d645404e1a8ab8d6d5f92
-
SHA1
91b910881f0276eaedb4d81a3fd9b67735186bd5
-
SHA256
d35d0449349e9919dde3211fd0dd6bac94928fd26171bd362dac6e9ff98b081a
-
SHA512
6c15cda324375d85513d35c615624887d41a9959ba7aa9ada4cf0fa13bce25839504038b1709f5f64d9ea771a6fb44153eae4cdfe0c216b5aa4a2f3189325f60
-
SSDEEP
1536:+6PZ0KkLhyjwrd7mjN9LYZPiFmbUX+k6bWPCXd7EvgaAEOlaZs:+4051yjwFmjNSCmfk7PkIvBpy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14f5847d8f0d645404e1a8ab8d6d5f92
Files
-
14f5847d8f0d645404e1a8ab8d6d5f92.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE