Static task
static1
Behavioral task
behavioral1
Sample
1cea24d80129f6ae6e00cead0741f93d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1cea24d80129f6ae6e00cead0741f93d.exe
Resource
win10v2004-20231215-en
General
-
Target
1cea24d80129f6ae6e00cead0741f93d
-
Size
440KB
-
MD5
1cea24d80129f6ae6e00cead0741f93d
-
SHA1
c2bed1de0699d8f1d23d2513f9c06d0aeb5e2474
-
SHA256
d3aaf87cb5536dd1d46de93e08e72cd9db69f7d4848bdd9a4d113d79ca6e8870
-
SHA512
4524da158fadfc79acba682b13fef33d49c2cadce26ba84a7b73a603d064283547a5c7ea132054d611bd322c7ec137dfe1809000ec75ffea38aa3c1feaf1851e
-
SSDEEP
6144:5lbzcYnRNkVsuaRaU6mHGO4rBfL1RCaSC0eZylPwhMX8BOd41NX/+uJ82wl9J+F5:n0aRz6mHGV1R3/ZyWuzdGl/tJkJ+zPr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1cea24d80129f6ae6e00cead0741f93d
Files
-
1cea24d80129f6ae6e00cead0741f93d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE