Static task
static1
Behavioral task
behavioral1
Sample
1ee2449356915d3bba90bdcbf824c116afb4dda6df08358122dead02302c51d9.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
1ee2449356915d3bba90bdcbf824c116afb4dda6df08358122dead02302c51d9.exe
Resource
win10v2004-20240426-en
General
-
Target
1ee2449356915d3bba90bdcbf824c116afb4dda6df08358122dead02302c51d9
-
Size
14KB
-
MD5
2ed5ba384891fa4213c697f18bb9afbf
-
SHA1
f9646c15fc36d630c53f931a3526033282650c28
-
SHA256
1ee2449356915d3bba90bdcbf824c116afb4dda6df08358122dead02302c51d9
-
SHA512
30db218d27677bad5e165ec03b138b7d1fedee5a49f7be79abeb6a6cdc8e4b87912c4a6996b66c2c86a10ed34ffc332a02a2eda8c84090149542d95f4f21cf84
-
SSDEEP
192:TGF4AfMqQ1wJHuZ6DoBxqPR8sdddd1Q5ldgYIerSPXqDE045HQcfff:0sWoWScQ5KuDE045H1fff
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ee2449356915d3bba90bdcbf824c116afb4dda6df08358122dead02302c51d9
Files
-
1ee2449356915d3bba90bdcbf824c116afb4dda6df08358122dead02302c51d9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ