Static task
static1
Behavioral task
behavioral1
Sample
c1052b4cf74bced45f1ac5902b149cfb.exe
Resource
win7-20240220-en
General
-
Target
c1052b4cf74bced45f1ac5902b149cfb
-
Size
142KB
-
MD5
c1052b4cf74bced45f1ac5902b149cfb
-
SHA1
ebafc09c068400877fce3efcdf59891d4971034c
-
SHA256
ddb5f4e6eb77906f0571a58d27000cf34d0981402e9a98aaed620d24c4470eb9
-
SHA512
9d61a7b249c5b9360a102b86de5005d9bfaa9129564a26307acd0dc32e4e247c29358edf13bf7beb886cb76fcb015f4bd0cb6bb16d6778129bee18cd31be2c07
-
SSDEEP
3072:pyUkUc1vl5DarEKMtJU4lOLatqf/lOFxuqyE1wKKJ15LxV:pr+1t5DaAvjUWO+tqUFxuqH1wZJL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1052b4cf74bced45f1ac5902b149cfb
Files
-
c1052b4cf74bced45f1ac5902b149cfb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 137KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE