Static task
static1
Behavioral task
behavioral1
Sample
1532edcff3990d0738c30f20190218c8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1532edcff3990d0738c30f20190218c8.exe
Resource
win10v2004-20231215-en
General
-
Target
1532edcff3990d0738c30f20190218c8.exe
-
Size
4.9MB
-
MD5
1532edcff3990d0738c30f20190218c8
-
SHA1
967681b5b2d4c5d5baa751c2cd6b8c9118d75261
-
SHA256
d856a617785c6e06197cf4b06c7fed5160e7120cbefddd79d0e4752ac713c040
-
SHA512
4afd520bbc2ed7e4c684f792e96bf464c25d8bd809ea610f87f1b29b6df8b67bd271ad4a222f4b2d03e6a6bb9e6a6ff08bb5c4f7ba23a9d9daa42b65dd96a93c
-
SSDEEP
98304:Ac3Ti0MXQrNmppfH0pxBzCgvdVfuUE3SLTFsRNV8akXFyaDWQxVyKk:XTi0MXQrNmpd0xzCgv7fuUE3S3FWcaU6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1532edcff3990d0738c30f20190218c8.exe
Files
-
1532edcff3990d0738c30f20190218c8.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ