Static task
static1
Behavioral task
behavioral1
Sample
1bf71f20039ec171e848d803a64ae723.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1bf71f20039ec171e848d803a64ae723.exe
Resource
win10v2004-20231215-en
General
-
Target
1bf71f20039ec171e848d803a64ae723
-
Size
385KB
-
MD5
1bf71f20039ec171e848d803a64ae723
-
SHA1
6112936f10f2930bcd4bfd0f6dbc6b34864eb812
-
SHA256
d42aefd9b9d217f9ff72b46593204620e6f09e51a87db954b4287ac5748d19f3
-
SHA512
85063d5cacd00e9bb021dfdec9b66a03cb5c7ca6dd318b35344fbf74b38e1b514ffec92ea2278bd8c027ab9c4b60a22b14bc8464c090822ae2b8a8cbf0528471
-
SSDEEP
6144:R0RtIbk3gxXSV/KbwujgKGSa5O5Uie9RMH2WxFCTYQR0Ug3HtcFBe5JAFZB:R2QJSVawcDt5W92dvS5vZB0GbB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bf71f20039ec171e848d803a64ae723
Files
-
1bf71f20039ec171e848d803a64ae723.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ