Static task
static1
Behavioral task
behavioral1
Sample
1e1161cd57d62880a9c0471a8c53170778b2949d0aab41917c5596750c76d4c5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1e1161cd57d62880a9c0471a8c53170778b2949d0aab41917c5596750c76d4c5.exe
Resource
win10v2004-20231215-en
General
-
Target
1e1161cd57d62880a9c0471a8c53170778b2949d0aab41917c5596750c76d4c5.exe
-
Size
1.1MB
-
MD5
1d5f40d964eb607ae7fe879de4c96159
-
SHA1
ce4440a2a8df06c408985f083a31971593840137
-
SHA256
1e1161cd57d62880a9c0471a8c53170778b2949d0aab41917c5596750c76d4c5
-
SHA512
3ba46b430150b0351e203a74fbde92131882cd579decea1e2ba36f6cef6f4a63eb5de576aaad51e4102429f7419f71022cdd6f272c320755fe786442e5c1f619
-
SSDEEP
24576:VzHE07XljoDf544BukqjVnlqud+/2P+Aq1qIi:dE8lsDfskqXfd+/9AnIi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e1161cd57d62880a9c0471a8c53170778b2949d0aab41917c5596750c76d4c5.exe
Files
-
1e1161cd57d62880a9c0471a8c53170778b2949d0aab41917c5596750c76d4c5.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 937KB - Virtual size: 936KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ