Static task
static1
Behavioral task
behavioral1
Sample
c1af0656093c3e74be780362ae9abb69.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c1af0656093c3e74be780362ae9abb69.exe
Resource
win10v2004-20240226-en
General
-
Target
c1af0656093c3e74be780362ae9abb69
-
Size
20KB
-
MD5
c1af0656093c3e74be780362ae9abb69
-
SHA1
e17990ecf6a5d2405a5f14cd7d7a4f21330251cf
-
SHA256
29bc4badf82f531b22e210efffbddf3e3806c7750b61c319b93e5f24aa771d21
-
SHA512
837785a738cebc534cf85ff938a126a12df2e1c95414962c6ea24fe1b9a4af5184b2308ec444c2a5b5ef6fe8aa369f7738febe9854ee902a1bb5d1e758e7d98c
-
SSDEEP
48:aiQwg8+hxSDbYNlNOqn1bnzsOBcXJkbsHw7e5H2MdmOKTdhGWHlJiHUrx5Hy09yg:rfY9TnRjBjKqet2MKnGWHjxrx5rySFx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1af0656093c3e74be780362ae9abb69
Files
-
c1af0656093c3e74be780362ae9abb69.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1010B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ