Static task
static1
Behavioral task
behavioral1
Sample
1b1f483283a04b3c60dd8e34927baabd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b1f483283a04b3c60dd8e34927baabd.exe
Resource
win10v2004-20231215-en
General
-
Target
1b1f483283a04b3c60dd8e34927baabd
-
Size
612KB
-
MD5
1b1f483283a04b3c60dd8e34927baabd
-
SHA1
3b7c9d79fbe5fccb1f20f279d467e4563b0e4038
-
SHA256
d3fc49b45c09ba33eeeb0490555a1a7d30c823bb19f188144d70feffc9f4d1ce
-
SHA512
5be76392982f8cb9ab1b7337567de49663d6ab4fe621caccf38521bc9120aa485eb0f285e2b888e2bf60ef823a01563d7f962e16972e28511d5c1fc4a140a39e
-
SSDEEP
6144:ZCLg6scDbc6Qt9V0y9EXHZJZV3Sf8CX5dW1GgbC/LeQaYt:4865Dbc6Qt9V0y9orV3Sfl5dC6DHH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b1f483283a04b3c60dd8e34927baabd
Files
-
1b1f483283a04b3c60dd8e34927baabd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 576KB - Virtual size: 573KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ