Static task
static1
Behavioral task
behavioral1
Sample
1c2fae56041d4a497393ee37454ac6fb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1c2fae56041d4a497393ee37454ac6fb.exe
Resource
win10v2004-20231215-en
General
-
Target
1c2fae56041d4a497393ee37454ac6fb
-
Size
423KB
-
MD5
1c2fae56041d4a497393ee37454ac6fb
-
SHA1
ad441cc7fdb4a4a1ee087490ae8f6ba63445e2de
-
SHA256
4787b9bfaa051d730f6fc8e1d0e50f6af3ad670c081a64e25527062f90b89003
-
SHA512
c680ee066d1bba166772c63e111c34986ba4cc1154cbde3893df267f25495e8e755f8478405ba07c884a8eea90e4ebd9476f78808b1962706653cbddce0a6f69
-
SSDEEP
6144:7x6EMRYC9ELdnXB3Lp4Ewqckshl18uWGleHEumumSWmIeEZVRW1YIcdHJyqZdM0Q:jC9ELBXB1z9cB7FWGUouwDvRbpJDRG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c2fae56041d4a497393ee37454ac6fb
Files
-
1c2fae56041d4a497393ee37454ac6fb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.4MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 37KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 475KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE