Static task
static1
Behavioral task
behavioral1
Sample
1b12902514043f408c494235289c11c16c71ac113ca81390de294c35fe2be1ce.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1b12902514043f408c494235289c11c16c71ac113ca81390de294c35fe2be1ce.exe
Resource
win10v2004-20240419-en
General
-
Target
1b12902514043f408c494235289c11c16c71ac113ca81390de294c35fe2be1ce
-
Size
14KB
-
MD5
8c6d893fcb5a6d5248093c1181d13fc2
-
SHA1
33f8ab7ef101f824df2396cdaa35046945c5888a
-
SHA256
1b12902514043f408c494235289c11c16c71ac113ca81390de294c35fe2be1ce
-
SHA512
766af167de45fb08dea2954a05fdc1befc5698f08705a4fed70b92917048e90cbe092b52557152b1409c54536554126c5af721e3216580527742afbe5d161cd5
-
SSDEEP
192:4XeX+wPDWGvQYMrjkn9ai7ZPzGZvHWqO5bw+xRCCpQMrt0gdUgH+qDE045HQuUAm:ueXHvFWSt174ftixfpR9WmxDE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b12902514043f408c494235289c11c16c71ac113ca81390de294c35fe2be1ce
Files
-
1b12902514043f408c494235289c11c16c71ac113ca81390de294c35fe2be1ce.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ