Static task
static1
Behavioral task
behavioral1
Sample
1a3154e939b00833cd7c5b7ebe9d899e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1a3154e939b00833cd7c5b7ebe9d899e.exe
Resource
win10v2004-20231215-en
General
-
Target
1a3154e939b00833cd7c5b7ebe9d899e
-
Size
141KB
-
MD5
1a3154e939b00833cd7c5b7ebe9d899e
-
SHA1
51388a74e42976a095df719ca56dcd2413d00986
-
SHA256
5e2599000286d58542f86089f2ac6ddcfd41baf1f3b0e77bfed70d37c499d961
-
SHA512
b4eea56e72b905ca69ed080e8fbec56e2c983dc994dda9adafc7b620c07c018acf0bc1d7217b089ca7765a2e5e828bd62203be74ffcee64dca272f913d3a42f6
-
SSDEEP
3072:8WXO9308tYnjWw7u4s84qioD4y82ZRNllpwirIGLd50aS9p:rO96KnYtiejlx1pSt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a3154e939b00833cd7c5b7ebe9d899e
Files
-
1a3154e939b00833cd7c5b7ebe9d899e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 140KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mini9 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE