Static task
static1
Behavioral task
behavioral1
Sample
1b2570a1398f43c3f9c2b7dd4b90a3e8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b2570a1398f43c3f9c2b7dd4b90a3e8.exe
Resource
win10v2004-20231215-en
General
-
Target
1b2570a1398f43c3f9c2b7dd4b90a3e8
-
Size
635KB
-
MD5
1b2570a1398f43c3f9c2b7dd4b90a3e8
-
SHA1
830203b8351a663b95b6faa8e1e0c90497623d54
-
SHA256
15ebfc8b34126ff3f79d863e57591910f647ea50a09e582a1892372d4778b6b0
-
SHA512
cd2936fcfc9153cfd13aed907ef362038c79aac6dbb48b8dcab0ea591d238cfdeebc0b16b26e3ee4639e43dd0450e3916135162bfbb6c190a7c1c6d79e05095f
-
SSDEEP
12288:kiQ69CW5HAqcoISn0BnhT0/th1c2obY7ef2A+ro/xNB7bd8/UQF:P1LooD0fT0/Loc6f2AWoRdVQF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b2570a1398f43c3f9c2b7dd4b90a3e8
Files
-
1b2570a1398f43c3f9c2b7dd4b90a3e8.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 371KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 262KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE