Static task
static1
Behavioral task
behavioral1
Sample
1b879b742076b14cd0c6be457198bef3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b879b742076b14cd0c6be457198bef3.exe
Resource
win10v2004-20231215-en
General
-
Target
1b879b742076b14cd0c6be457198bef3
-
Size
47KB
-
MD5
1b879b742076b14cd0c6be457198bef3
-
SHA1
689d4ee4c896bc4d3b290e3e2052d144c94d122f
-
SHA256
04031dec2db2acc442b7adc5bfb444f3c6b7e99b5df4a2fdde1561c0e670cf07
-
SHA512
7c5d7efd92a5924bdf3c1e4b780672c0de17c59ef3fccdc361b497c082d7e1a7565c5d8f125211af802c52b76dd4945da08ccfab189674e05db5f466b13a4b35
-
SSDEEP
768:4z89zY/qIif9nniA3pG1F7ShJn2dc5z9i8o5iXTmQgG:4zoY/qI8n33pGB4Jn2dc5zCvQg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b879b742076b14cd0c6be457198bef3
Files
-
1b879b742076b14cd0c6be457198bef3.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 945B - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE