Static task
static1
Behavioral task
behavioral1
Sample
1906c2dd3aa4c250298cf8a8fe9f578b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1906c2dd3aa4c250298cf8a8fe9f578b.exe
Resource
win10v2004-20231215-en
General
-
Target
1906c2dd3aa4c250298cf8a8fe9f578b
-
Size
17KB
-
MD5
1906c2dd3aa4c250298cf8a8fe9f578b
-
SHA1
2d615a17172a33ff7ac80f2015452502797c3a64
-
SHA256
33bdf9790a05940d95fb3061b187ccf81ca8e721c87520b985b89ec980462263
-
SHA512
ac52f3913c8278a5f7dba0e9804089716bf837c6f7caa950b255c258c5e4f6f2a4171201c5c957048251fa188c0855368ee34f7bfefd843ad335037d57933521
-
SSDEEP
384:jnhZOnpw4qnuHIRuRKa1UP+ktKhZAxcr6+e9Pfqbn13IixA:jnvOp9qzlaCP+kEhKxrha535xA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1906c2dd3aa4c250298cf8a8fe9f578b
Files
-
1906c2dd3aa4c250298cf8a8fe9f578b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.FSG Size: 10KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.FSG Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.stealth Size: - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lame Size: 656B - Virtual size: 656B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE