Static task
static1
Behavioral task
behavioral1
Sample
d1f485f3c289833019db9304de6258b1c742f63f49ed8c9c456d52d0df4e4dbf.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
d1f485f3c289833019db9304de6258b1c742f63f49ed8c9c456d52d0df4e4dbf.exe
Resource
win10v2004-20240508-en
General
-
Target
d1f485f3c289833019db9304de6258b1c742f63f49ed8c9c456d52d0df4e4dbf
-
Size
14KB
-
MD5
30f4f3cf44afdf5d70b4d9a2fbfadfb0
-
SHA1
7452ed56b0870505f9de2dce86fa4704226474b7
-
SHA256
d1f485f3c289833019db9304de6258b1c742f63f49ed8c9c456d52d0df4e4dbf
-
SHA512
7c0439b2d65882c84ee6e6efe4492da9f35da5f1e5fd8e1eebc91444943b56867ef51b5365ecda2cc9e5c4f36e570d305ee5927c43b98961e6bed1fc39cd4d68
-
SSDEEP
192:YirWr11YaMFwVM2HRNa4jIdiKDCVAHsD8hP4iDtqDE045HQ1U0U0U0U:YirW1VRjjIYKDXHswP4y0DE045H3hhh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1f485f3c289833019db9304de6258b1c742f63f49ed8c9c456d52d0df4e4dbf
Files
-
d1f485f3c289833019db9304de6258b1c742f63f49ed8c9c456d52d0df4e4dbf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ