Static task
static1
Behavioral task
behavioral1
Sample
1e6a09dc069ee429fb0df4ba085ea8c330b30970d6df846b9cfeffc74338b4e1.exe
Resource
win7-20240221-en
General
-
Target
1e6a09dc069ee429fb0df4ba085ea8c330b30970d6df846b9cfeffc74338b4e1
-
Size
1.1MB
-
MD5
2c949ee6558f239c107cadb6fda3d297
-
SHA1
b2bb8b465ed3891e20c30a724875fb3fb3d29a8a
-
SHA256
1e6a09dc069ee429fb0df4ba085ea8c330b30970d6df846b9cfeffc74338b4e1
-
SHA512
d596e2de9fef0152087037a1b949d79c05dc305103b67ad13af4065ef01fcbbad6b3e7361311c95d31d61f110e4835109c5c426aef957ad4c502d08e5826e673
-
SSDEEP
24576:dJqtZ2F83eGiHKCsLnMpK5SFdtNc/enhABFlEXdkE+i/I:dJq62hCsDaHdtNcDEXdNXQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 1e6a09dc069ee429fb0df4ba085ea8c330b30970d6df846b9cfeffc74338b4e1
Files
-
1e6a09dc069ee429fb0df4ba085ea8c330b30970d6df846b9cfeffc74338b4e1.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1003KB - Virtual size: 1004KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 253B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE