Static task
static1
Behavioral task
behavioral1
Sample
c1ea21df7acd8cc34e42f2e8dd1a2c4e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c1ea21df7acd8cc34e42f2e8dd1a2c4e.exe
Resource
win10v2004-20240226-en
General
-
Target
c1ea21df7acd8cc34e42f2e8dd1a2c4e
-
Size
99KB
-
MD5
c1ea21df7acd8cc34e42f2e8dd1a2c4e
-
SHA1
4aaf941f3ee3b0e9f28b779e9c814522580cffee
-
SHA256
328d119803112a9f9b2027bb5b4f1cdfb0cfe546c4460301c957f17e72d45a79
-
SHA512
b18631a5d66a47e8393d2dd6df1e594a66a808eb8ecb746d6fbb7823d0b1627ddfbd0eaa4c4f4925d10563804d0d996d08fd9d200260ec9f0ef68e28fa5e8a2d
-
SSDEEP
3072:60yyD2hJo2ZIhZqM2rSWHWOp7hBzMtic9Mv:60yyS62ZudU7d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1ea21df7acd8cc34e42f2e8dd1a2c4e
Files
-
c1ea21df7acd8cc34e42f2e8dd1a2c4e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ