Static task
static1
Behavioral task
behavioral1
Sample
1a824db2d0ff2fbd22a8a1669c59703c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1a824db2d0ff2fbd22a8a1669c59703c.exe
Resource
win10v2004-20231215-en
General
-
Target
1a824db2d0ff2fbd22a8a1669c59703c
-
Size
8.4MB
-
MD5
1a824db2d0ff2fbd22a8a1669c59703c
-
SHA1
e652c0e9c967475bfb655957a689cf2ea1379146
-
SHA256
ddb8581c322723a424aad893e66b454c1187aced4f6e73b124ddecb6dc8e115f
-
SHA512
c0e2430930e0d36af8b1eb32510cdaebd86f2946a2917271f2c45e00ea652f7ffa82ca138c440487e2817cca520d6b96e43f594ddb011a802d6377b4c898aebb
-
SSDEEP
196608:MIXUQ/SSSirL3/ZPruNnB1qBBe4lXeVWH6pGpVkw:MuUQ68NeBABE41e7Gp3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a824db2d0ff2fbd22a8a1669c59703c
Files
-
1a824db2d0ff2fbd22a8a1669c59703c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 972KB - Virtual size: 972KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 6KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 36B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 310KB - Virtual size: 309KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ