Static task
static1
Behavioral task
behavioral1
Sample
1636c4b004c75804dabc6a38ffd5519d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1636c4b004c75804dabc6a38ffd5519d.exe
Resource
win10v2004-20231215-en
General
-
Target
1636c4b004c75804dabc6a38ffd5519d
-
Size
82KB
-
MD5
1636c4b004c75804dabc6a38ffd5519d
-
SHA1
16c781a3799c8d7a3f9c6dbf5f965dfb0d708785
-
SHA256
389dea4d67257ac524b66eb1ee6934091ada9173f836130318c219cc0038be67
-
SHA512
dcafc1550ca3850764686c3359bea1b4b5af17876b1ff50b3f52f05322b8e080787b30f1cd0ac019a8a1ee92a6d91f0b253a1a6079752d9988a11ebabb917dc5
-
SSDEEP
1536:umGgnq8377WinG4HaZ4DyB4HqRmQ11yvV7ZJSPJyn630DVnyCizSi9Z:uUXL7W4G4Ha/aKmtvVVgPJytDVnUzR9Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1636c4b004c75804dabc6a38ffd5519d
Files
-
1636c4b004c75804dabc6a38ffd5519d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 90KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ