Static task
static1
Behavioral task
behavioral1
Sample
1b3e52cf8e8a17bba82d9af84bc1853d57f4a7b2cb408c9450dcbf434395fa7c.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1b3e52cf8e8a17bba82d9af84bc1853d57f4a7b2cb408c9450dcbf434395fa7c.exe
Resource
win10v2004-20240611-en
General
-
Target
1b3e52cf8e8a17bba82d9af84bc1853d57f4a7b2cb408c9450dcbf434395fa7c
-
Size
1.2MB
-
MD5
64e7026e85a41dba22c4cf2234398388
-
SHA1
e8c33e0d1981a78f6fa17a459a94ab806a983557
-
SHA256
1b3e52cf8e8a17bba82d9af84bc1853d57f4a7b2cb408c9450dcbf434395fa7c
-
SHA512
13dc8de5a7a84c8f8795a532acc7943a699fb338a97e07ce47fc312df26a4077ad347500dd909b141bbd7af10e128a8e5d90efbb171e0b4513dc83ea96ff3d02
-
SSDEEP
24576:7DnbPF3cmFeF8qH4urqVeLf1Ki6MNtL/yoWRlS2tLKBGX53DcvW:Xbd3nFleNttPtL/fwvko3m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b3e52cf8e8a17bba82d9af84bc1853d57f4a7b2cb408c9450dcbf434395fa7c
Files
-
1b3e52cf8e8a17bba82d9af84bc1853d57f4a7b2cb408c9450dcbf434395fa7c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
64z8gfdq Size: 37KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
b501pxhu Size: 5KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
x555rskq Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 202KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 947KB - Virtual size: 948KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE