Static task
static1
Behavioral task
behavioral1
Sample
c1217e1cba93b8a477a111e58e1519066266e63ac89a31cb89e1cfb3045e4906.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c1217e1cba93b8a477a111e58e1519066266e63ac89a31cb89e1cfb3045e4906.exe
Resource
win10v2004-20240412-en
General
-
Target
c1217e1cba93b8a477a111e58e1519066266e63ac89a31cb89e1cfb3045e4906
-
Size
151KB
-
MD5
2b5ede05820d5eab045cf51de1f31581
-
SHA1
cb0dc7e2cf82db6c8c9b74de8ade1ea0f2479218
-
SHA256
c1217e1cba93b8a477a111e58e1519066266e63ac89a31cb89e1cfb3045e4906
-
SHA512
7787d92800f105251952f18817a4d0fb573c1e57ec24ca09b8a540fec4a42ba4dc193c10306801a16e18e30d2262eb89596b477268f483817efc4d382a2bec9d
-
SSDEEP
3072:oZpYg19EeiLLmjempGuCYooEK1JWaCItULG3rt2Wcora4dI:OPjEl6jLiQ1JW+Oy3p/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1217e1cba93b8a477a111e58e1519066266e63ac89a31cb89e1cfb3045e4906
Files
-
c1217e1cba93b8a477a111e58e1519066266e63ac89a31cb89e1cfb3045e4906.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 130KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dask Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fd Size: 54B - Virtual size: 54B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ