Static task
static1
Behavioral task
behavioral1
Sample
1bd3f323dd1b9f2e07dc696cd21cc410.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1bd3f323dd1b9f2e07dc696cd21cc410.exe
Resource
win10v2004-20231215-en
General
-
Target
1bd3f323dd1b9f2e07dc696cd21cc410
-
Size
129KB
-
MD5
1bd3f323dd1b9f2e07dc696cd21cc410
-
SHA1
dc8ad1eb3cc6cc0dcf79c29c99bc8c47b5cdee19
-
SHA256
e6454449c2647f6e952ba5aea65e8417816d782c2629e7763d4c42f30dac1539
-
SHA512
09abfc6147ec8730218e6a1cc64f0b9184036aa6d314bed5f6c3dc45fe4de69526f13fc6190088926bbd7bf16edb815c0ffcd2f2ecba80a412b0daa6b1bdd32a
-
SSDEEP
3072:FYpy99NvFWP2tkfoQAimuu85305jsmn8leRfy72UdQjK/jf:F39TWeHFxNM01wl1r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bd3f323dd1b9f2e07dc696cd21cc410
Files
-
1bd3f323dd1b9f2e07dc696cd21cc410.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
nlsmce94 Size: - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jshkmzjb Size: 124KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8st8k Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE