Static task
static1
Behavioral task
behavioral1
Sample
d1c2d86badcee0e888e695e7c5ef219cf95dd37a3f396a2a651471890b47cc0a.exe
Resource
win7-20231129-en
General
-
Target
d1c2d86badcee0e888e695e7c5ef219cf95dd37a3f396a2a651471890b47cc0a
-
Size
3.1MB
-
MD5
a046587d63ad497794fc9f7276a2fdc0
-
SHA1
94648e482c693a1855841ca49a3b7d63fb268571
-
SHA256
d1c2d86badcee0e888e695e7c5ef219cf95dd37a3f396a2a651471890b47cc0a
-
SHA512
01408a6b88a2b1237d6783795cdee586b549169fee5002a93d655f72dca1c60cef3580273cbcb0bf3a6a354edb2b2c768aeb4330762f71b23019c9cd504e29b1
-
SSDEEP
49152:SFI8boQhfD6UDvxvykXk1rBsgyegFKvc4clwY:QDm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1c2d86badcee0e888e695e7c5ef219cf95dd37a3f396a2a651471890b47cc0a
Files
-
d1c2d86badcee0e888e695e7c5ef219cf95dd37a3f396a2a651471890b47cc0a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE