Static task
static1
Behavioral task
behavioral1
Sample
1ec72c4e6b05c1a72e100700a52c7220N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1ec72c4e6b05c1a72e100700a52c7220N.exe
Resource
win10v2004-20240802-en
General
-
Target
1ec72c4e6b05c1a72e100700a52c7220N
-
Size
32KB
-
MD5
1ec72c4e6b05c1a72e100700a52c7220
-
SHA1
5cfa07949c49653485390d852c70864b381bea8a
-
SHA256
36a8b6bfef1ebbe4cf5eede2d0427e7888fbc7bdeaa4f5a74974f54902ea006c
-
SHA512
7c409745a145e778cddf399b944e23dca1eeefb4a86713f75dcf1e9670ab8afd5fca89b4d2008be8531e787026d58f8aee184308b873827c1bcf4f16c83e6a48
-
SSDEEP
384:Eli+sZwufP6bhSZ+sZwufo6vNn5OqtRGYn7K4cPNwJsowIX+Cx/0:ElenXyhSngmN5yYn+Vo9x/0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ec72c4e6b05c1a72e100700a52c7220N
Files
-
1ec72c4e6b05c1a72e100700a52c7220N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_UP_SYSTEM_ONLY
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 172KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 288KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ