Static task
static1
Behavioral task
behavioral1
Sample
1e30c81b2a4dd42c1e56f467c39dd020N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
1e30c81b2a4dd42c1e56f467c39dd020N.exe
Resource
win10v2004-20240802-en
General
-
Target
1e30c81b2a4dd42c1e56f467c39dd020N.exe
-
Size
538KB
-
MD5
1e30c81b2a4dd42c1e56f467c39dd020
-
SHA1
544678532d0d8f57c9f86b0066dee11a396d5fea
-
SHA256
c51865c60893b6fa99e78e54b9f470fef0e212080bccbdf980722b15119c3f3d
-
SHA512
d9ce94c098b93a8bf8881c669b7dfe236bc4177e0b9388f2fbf821a312e3c09db491e15f8e137e1cca5da83dd54c4750dc0d546bc55cc0602e1553a7fe4eb0a0
-
SSDEEP
12288:wlbL+h1gL5pRTcAkS/3hzN8qE43fm78VZ:WbL+w5jcAkSYqyEZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e30c81b2a4dd42c1e56f467c39dd020N.exe
Files
-
1e30c81b2a4dd42c1e56f467c39dd020N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
VHqxTUpa Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IaDsgWGk Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE