Static task
static1
Behavioral task
behavioral1
Sample
1b9f2c17956f905edbe3643ad64282ae.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b9f2c17956f905edbe3643ad64282ae.exe
Resource
win10v2004-20231215-en
General
-
Target
1b9f2c17956f905edbe3643ad64282ae
-
Size
361KB
-
MD5
1b9f2c17956f905edbe3643ad64282ae
-
SHA1
7da091e7bfad7a74d75e7dcd9d9f3f3d8458a6f7
-
SHA256
5a98d8f282ac21df67ad423fe28c21cb80a131f6879f42fa5b9f6d8929b74e34
-
SHA512
ef1c0f888992cdee75f907db9f4ff85acc57a65768ff04267758abf2a6bfdf4fcd421dda84d4e19b94ec007a6ff2d9b29a2b71262c3da66a2252432e6a81b499
-
SSDEEP
6144:QE47bCmcXYCj79yAxX2G29EcHLuRRT+MJHxpT1m2LlyQgKI/hgc4WV/qQ:QE4IYQ4AxX2G29EcHLMRJJR11NloKIMQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b9f2c17956f905edbe3643ad64282ae
Files
-
1b9f2c17956f905edbe3643ad64282ae.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 59KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: 292KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE