Static task
static1
Behavioral task
behavioral1
Sample
1fbed96200a87f404ca00d11c42bf161.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1fbed96200a87f404ca00d11c42bf161.exe
Resource
win10v2004-20231215-en
General
-
Target
1fbed96200a87f404ca00d11c42bf161.exe
-
Size
560KB
-
MD5
1fbed96200a87f404ca00d11c42bf161
-
SHA1
b16be0a4feac4399d70450a2547e4d79a697cf31
-
SHA256
a77d42e5cf03fce86d5fcc844840ab9f8db3f562791348ae5bca2aaba0d3f54d
-
SHA512
b6a8eb2db92266a0e9153f7a58093e43bc391a276a1dc7f1a2f6c9fbf85cdc3894e9d8f02258d44ab91be70fa710aea16780f15dee79743a69a00ba99d078c96
-
SSDEEP
6144:5vQ1ZlJEAdNv0ClLmZC/k6V1m1YAOfRt69uGMg6hKPz2DQwT8jF5eWWW9qXeYySb:OrgF6VgYAEclMg372DZTAX3WqqXeYy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1fbed96200a87f404ca00d11c42bf161.exe
Files
-
1fbed96200a87f404ca00d11c42bf161.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 557KB - Virtual size: 557KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ