Static task
static1
Behavioral task
behavioral1
Sample
1b837c7953892ca40261a8dc6f94ad02.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b837c7953892ca40261a8dc6f94ad02.exe
Resource
win10v2004-20231215-en
General
-
Target
1b837c7953892ca40261a8dc6f94ad02
-
Size
8KB
-
MD5
1b837c7953892ca40261a8dc6f94ad02
-
SHA1
ec3e6ffa149324baab264a5219c3ac2aebcc5000
-
SHA256
a9fca13e15d1a44f81d2847194cb4e751e1c914cf166a991eff5c9b2905383c9
-
SHA512
42a6be97d5ba3e37cfbe202bcaacd5b944f16dff1565dc56e80e4063e57cf4f1295e05718b4e4a3a684409d077c3d9470272bf91adc03afe417d5bf1fa9b6465
-
SSDEEP
96:nRy3CXSSgB1mggMuyz9YcVrSARcjQsfOKwzdY+9uLcZccQ8TKkTt7t0fsybE:U3KSfV0yz9ifOXzdD9HZi8TrTtx0JE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b837c7953892ca40261a8dc6f94ad02
Files
-
1b837c7953892ca40261a8dc6f94ad02.exe windows:4 windows x86 arch:x86
346c934f447946b4bf01d8e672795678
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetAtomNameA
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 86B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ