Static task
static1
Behavioral task
behavioral1
Sample
1d89ac6a6117f52ad761cc48f18b7c6d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1d89ac6a6117f52ad761cc48f18b7c6d.exe
Resource
win10v2004-20240508-en
General
-
Target
1d89ac6a6117f52ad761cc48f18b7c6d.bin
-
Size
50KB
-
MD5
1d89ac6a6117f52ad761cc48f18b7c6d
-
SHA1
8c301ac7442be43fe3d86f93fb45db1430ff966d
-
SHA256
6da225875549e46fe8b234b7a85ea9a4b550c66bf4719750195063cf24ee18b4
-
SHA512
aaa8388e31edfcf554dfd3cbe5e3e579c7c04e93fb2a3ea96581f1e1333713f024251ec5b8cf2cfb953245b2b9ddc0af75a2ccf9a56ffd855ed38606e028f6c4
-
SSDEEP
768:kq8/jezOY3cbAUg0Sc+Tlcn7zu06RCHQNy2oWKZ4m2CnRgiO/C0CEsRMb:kq8KXc8P0L+qCsQLoPZ4GRgR/MEWc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d89ac6a6117f52ad761cc48f18b7c6d.bin
Files
-
1d89ac6a6117f52ad761cc48f18b7c6d.bin.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_TEXT2 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE