Static task
static1
Behavioral task
behavioral1
Sample
1700bb236c2950fade7ac57c6cdc1b48.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1700bb236c2950fade7ac57c6cdc1b48.exe
Resource
win10v2004-20231222-en
General
-
Target
1700bb236c2950fade7ac57c6cdc1b48
-
Size
618KB
-
MD5
1700bb236c2950fade7ac57c6cdc1b48
-
SHA1
e444f9b31b3e6f3e5dd12f17eafca04f0bb5a305
-
SHA256
a0aa640b8e73f4f207bbc19d860d0a3c85700b300c83a445ba5cd54a93236019
-
SHA512
ff032ec3fdc5f486bcad356e84ebe68307b4615117547e49c0aab9af8107b920ee7c15a924923512f8da264a0055907d68d2a55f0fc1cad96a44c45ea0bab369
-
SSDEEP
12288:TukpdE0caPHh8dhmF2P6U1fsG16F3Z4mxxqymB7feSzbA6nUb9h13S:SkYLaPBQA2v10HQmXT846eh1i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1700bb236c2950fade7ac57c6cdc1b48
Files
-
1700bb236c2950fade7ac57c6cdc1b48.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 247KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 349KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE