Static task
static1
Behavioral task
behavioral1
Sample
1942fbaed55012b5e87b0099e090a0cf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1942fbaed55012b5e87b0099e090a0cf.exe
Resource
win10v2004-20231215-en
General
-
Target
1942fbaed55012b5e87b0099e090a0cf
-
Size
141KB
-
MD5
1942fbaed55012b5e87b0099e090a0cf
-
SHA1
d63de31ca0bd43129057cbd42d354bf8fb5f169f
-
SHA256
593ca48edfb0801536b4636bb86ee06880f35056a7fdfb5b374e3e804f1f29ab
-
SHA512
9c3f96af6e543a802fa077b352d9e99320dcb985bb28548444c112f4cd40a35b40dc1ba7813e5f6b606ba7e9d3a0ddc9875c3cb6cd63a4f5d841c9738670f138
-
SSDEEP
3072:u/hIL4sS9u5shjI0bwnO3Nv20/ijN7lZ+p3mxqVQNiNaT4UGJmvTo:Mm4n9u5shjVbwo9/ijN7lEMxKRNdUGAv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1942fbaed55012b5e87b0099e090a0cf
Files
-
1942fbaed55012b5e87b0099e090a0cf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
85tmbs Size: 3KB - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
exoj Size: 132KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
o5eky Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE