Static task
static1
Behavioral task
behavioral1
Sample
1b74f7fdc476fd385f8985e0a9219f04.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b74f7fdc476fd385f8985e0a9219f04.exe
Resource
win10v2004-20231215-en
General
-
Target
1b74f7fdc476fd385f8985e0a9219f04
-
Size
59KB
-
MD5
1b74f7fdc476fd385f8985e0a9219f04
-
SHA1
783ea241b4383fe8c5007097a15dc1771f39fd8e
-
SHA256
a0752e4e93a7eaac51cfe6435569e6b1dff2c94b31c1ee2a9cfcedef9951456d
-
SHA512
81e55d890cee4a0e55346a968b4cc34929c2e6c80efc3d8f717f9841a5d447bc2e8480752850aec16146d7e50b72c63a6e0ec09cbbec4f4a5749e2bf01f4cb88
-
SSDEEP
768:d0W+AWN9czEV8mHqfo/lgPJuPJFEHzXpr0wOOkG7RRR3TP73uQN+JqIoK69eu:0AWDczEVYVJ8KHz5wwppR/D73uOdIW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b74f7fdc476fd385f8985e0a9219f04
Files
-
1b74f7fdc476fd385f8985e0a9219f04.exe windows:57051 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
yjazayba Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
yzjiajiz Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bqajqrzq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yjaaariz Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ