Static task
static1
Behavioral task
behavioral1
Sample
f1c2915126aed15253c4f3a594d965f5975e7c100426227de25d8e727431a585.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f1c2915126aed15253c4f3a594d965f5975e7c100426227de25d8e727431a585.exe
Resource
win10v2004-20240226-en
General
-
Target
f1c2915126aed15253c4f3a594d965f5975e7c100426227de25d8e727431a585
-
Size
14KB
-
MD5
4567632031d46e79f36106e745fdf377
-
SHA1
d255f5c6a0c7a64b198ad3d160db51cb289256c6
-
SHA256
f1c2915126aed15253c4f3a594d965f5975e7c100426227de25d8e727431a585
-
SHA512
ed569d521a43c291f8ab5e1d505e83d8fee26b215e6dcab89eb66936ad0f5f263052641f33d39f53a457d9567b72403ccbf3c8450798e7c733b97ee983e017f6
-
SSDEEP
384:FYjsIiNRJXNvfON8ViPbCVcgjAKsm0zdDE045Hsmmmm:2eP9NvaC8bCGgsm4A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1c2915126aed15253c4f3a594d965f5975e7c100426227de25d8e727431a585
Files
-
f1c2915126aed15253c4f3a594d965f5975e7c100426227de25d8e727431a585.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ