Static task
static1
Behavioral task
behavioral1
Sample
1c138b3f08e5859e3d85232c974dcd09.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1c138b3f08e5859e3d85232c974dcd09.exe
Resource
win10v2004-20231215-en
General
-
Target
1c138b3f08e5859e3d85232c974dcd09
-
Size
103KB
-
MD5
1c138b3f08e5859e3d85232c974dcd09
-
SHA1
d398aa2da2e49b235f5a58836946b9f7891ed743
-
SHA256
da30e7f7aba69b0f873cdaaa3141f1e52a8b402d800ae8abba042402a44e6a17
-
SHA512
ff98c1507821ca40b38b58acf1d77545f6e6dcf0ad71da07b792d4ec95fa253d29b6105199cbce0c2fc2c83492c051524572f14686c8019ec5639de54714fa3b
-
SSDEEP
768:koGaCBz/amJ5S4NjaTsi5TMB3lpbAOOHON5OFC:6YO59JaKpxOuN5OFC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c138b3f08e5859e3d85232c974dcd09
Files
-
1c138b3f08e5859e3d85232c974dcd09.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE