Static task
static1
Behavioral task
behavioral1
Sample
1b92b1a1b827b19d18ddaf0f0c3556cd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b92b1a1b827b19d18ddaf0f0c3556cd.exe
Resource
win10v2004-20231215-en
General
-
Target
1b92b1a1b827b19d18ddaf0f0c3556cd
-
Size
2.1MB
-
MD5
1b92b1a1b827b19d18ddaf0f0c3556cd
-
SHA1
1bf9a6f36b78fc5d89ef8a624b4f9d4d1106340f
-
SHA256
5bca7697f588d71ddc2565218833c862398b802e11623b02cd5c9cc7c628a1b2
-
SHA512
32df17eb180102fbc06b315ca51786c5dcc0ec48078ffccf89dbac8f83e7e543b841467dee9807e239126251548e8bfcd7f1d3854ec7a54071e454b90383e03d
-
SSDEEP
49152:NT3KgvC85mXRY876GvakM7AHoruxnHre1wE:JBmBp6GCkl4uxLA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b92b1a1b827b19d18ddaf0f0c3556cd
Files
-
1b92b1a1b827b19d18ddaf0f0c3556cd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 332KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.8MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 785KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE