Static task
static1
Behavioral task
behavioral1
Sample
1b6f3c74b36d6f15115c05077cd977cc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b6f3c74b36d6f15115c05077cd977cc.exe
Resource
win10v2004-20231222-en
General
-
Target
1b6f3c74b36d6f15115c05077cd977cc
-
Size
33KB
-
MD5
1b6f3c74b36d6f15115c05077cd977cc
-
SHA1
d2224ab5a210cd290480ea781cd6a16d3382be71
-
SHA256
e0bc875276ccb5f3f84bb5a77dc621f96354aa815b21d0aa1d95b9b50367213c
-
SHA512
b161b5de1011c7b5a5a0412c9d2ed8542d9166293eae93bec11a6fd20968df078ad43039f00e7c16afa5177807cc2fec17d0d2fc521242f3ea96e7a0a9ac7213
-
SSDEEP
768:R4JJ+L9qbApaJQAs9LBGRIy7PFJ92RVfMw6aHkUhJSIpJQgeldrnM:6uqZep9g37PP92TfMw5PDSYJQJz4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b6f3c74b36d6f15115c05077cd977cc
Files
-
1b6f3c74b36d6f15115c05077cd977cc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ