Static task
static1
Behavioral task
behavioral1
Sample
b1cdd9ccc174a5b9cd9bed35bbec44d0348d0797ccffa482885685e7785e4c10.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
b1cdd9ccc174a5b9cd9bed35bbec44d0348d0797ccffa482885685e7785e4c10.exe
Resource
win10v2004-20231222-en
General
-
Target
b1cdd9ccc174a5b9cd9bed35bbec44d0348d0797ccffa482885685e7785e4c10.exe
-
Size
1.7MB
-
MD5
01c5936f8b539a2fa0ba92e75b0afd23
-
SHA1
6d61d3fdfab790b688e098b7cdc11a4cbf512f73
-
SHA256
2ea1eb88455836b888437632decf92d364c4bec74d0b9c332f8135cf6127346b
-
SHA512
f75808b522387d69626d85e6c46a096ba3b810f1759c7f973463cb7ff9c8a238d4140e0f7ef72ad1c4e815040c1e4cd0242f760a814eb4b69372343f41bfb7cc
-
SSDEEP
49152:aAYMq5KMWcdMIzWXu2mvO+VGhYNjVsK7BP1IMQx:Hq5K/cdMIzWXu2N+VGhYNjJdtIMQx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1cdd9ccc174a5b9cd9bed35bbec44d0348d0797ccffa482885685e7785e4c10.exe
Files
-
b1cdd9ccc174a5b9cd9bed35bbec44d0348d0797ccffa482885685e7785e4c10.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 182KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 171KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE