Static task
static1
Behavioral task
behavioral1
Sample
c1965d136b41e4563f0de4d7edf8d7f34d793bba5e7a7008f58bab8926b74bf9.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c1965d136b41e4563f0de4d7edf8d7f34d793bba5e7a7008f58bab8926b74bf9.exe
Resource
win10v2004-20241007-en
General
-
Target
c1965d136b41e4563f0de4d7edf8d7f34d793bba5e7a7008f58bab8926b74bf9
-
Size
30KB
-
MD5
35c4bd8a9e5c2c56b03152f3748e8f7a
-
SHA1
18b00a88da8f102fdc898ee473034c5441ec6b7b
-
SHA256
c1965d136b41e4563f0de4d7edf8d7f34d793bba5e7a7008f58bab8926b74bf9
-
SHA512
042a43737201e8aa3c137f75d92d917ac7f42a797ba114b57f849cf1bd2f259ab4fe94f3c274be85a396139ec6760deccdd9a776c31a48c0d30531a1cc88424a
-
SSDEEP
192:2HTD0cOQ2IwkW8j2HLKpWwD42FC/8K2h9IBcCIWOUIeW96W:2McZR9j2HLKpWwDjFlKlcCIWOU1W96W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1965d136b41e4563f0de4d7edf8d7f34d793bba5e7a7008f58bab8926b74bf9
Files
-
c1965d136b41e4563f0de4d7edf8d7f34d793bba5e7a7008f58bab8926b74bf9.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE