Static task
static1
Behavioral task
behavioral1
Sample
c1bfbd46bb9157d7cc3d7a5b88c9c59c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c1bfbd46bb9157d7cc3d7a5b88c9c59c.exe
Resource
win10v2004-20240226-en
General
-
Target
c1bfbd46bb9157d7cc3d7a5b88c9c59c
-
Size
32KB
-
MD5
c1bfbd46bb9157d7cc3d7a5b88c9c59c
-
SHA1
2052e6e716512d3582e3fc16bac5733ac5aead3d
-
SHA256
e50128129497d6f638c1c54e43d1302a81812b8f67e4789d8a6c8a0a5e718920
-
SHA512
b3e4f1e02272386644c475ef249fd983dafd5832182fccf9dca7fe2ecdf193335653d82e7742e7dcdabceba7dbda274d348d9f3780ea9338305a703c727bf1ba
-
SSDEEP
384:s8CnR0zphuSgFZh2s6q9LQfL4dqUzy2XWqzjyDG4fZZRs:s8CRkkSUZh719LQfL4jSeo7R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1bfbd46bb9157d7cc3d7a5b88c9c59c
Files
-
c1bfbd46bb9157d7cc3d7a5b88c9c59c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
. Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
. Size: 144.6MB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ