Static task
static1
Behavioral task
behavioral1
Sample
1b5572b0f3e2e4a3c0b575dff27c9e64.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b5572b0f3e2e4a3c0b575dff27c9e64.exe
Resource
win10v2004-20231222-en
General
-
Target
1b5572b0f3e2e4a3c0b575dff27c9e64
-
Size
1.9MB
-
MD5
1b5572b0f3e2e4a3c0b575dff27c9e64
-
SHA1
6dc30eb24aa576a9d3cf3beaa5b59e988857b18d
-
SHA256
2a38dd54f277e512e50cbf6a83fa2337f78574c4c9e0c3c3897a22346f1cc9e2
-
SHA512
c561ea1b3931fa13092b6208dfdfb7588a211e6b65f047f32c2ccd068dcb40b6acdcdd7baceaa454f48b91b1b964cef4ac60138198cecd7740ea5bdc5c984eb6
-
SSDEEP
49152:2GAaR1JEu+8gSba0xtMBOOC+1/1QfoVOhFXtvtn:7OuNxGBlQfoVOT9v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b5572b0f3e2e4a3c0b575dff27c9e64
Files
-
1b5572b0f3e2e4a3c0b575dff27c9e64.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ