Static task
static1
Behavioral task
behavioral1
Sample
1bd13a28f62855a85170033ee25f73c387b512b0042be9314981887074393d0f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1bd13a28f62855a85170033ee25f73c387b512b0042be9314981887074393d0f.exe
Resource
win10v2004-20250314-en
General
-
Target
1bd13a28f62855a85170033ee25f73c387b512b0042be9314981887074393d0f
-
Size
272KB
-
MD5
ddd9a73f6b017c6839674d5e6f665c3f
-
SHA1
cb3f1debb913d6cafab38102c9f35b6450c3a3ac
-
SHA256
1bd13a28f62855a85170033ee25f73c387b512b0042be9314981887074393d0f
-
SHA512
41ef3b93154675266266dde5bbf579f54931ed3295ccaf1f2817201dbab3f07c1632f3c57a21f8d1bc9cdd02eba2f05735c946e6a4e17096e5ac7040b2cb0aa6
-
SSDEEP
3072:WdvzDqxs8ORikgogWfiuRXd3YmSffdTKXNXANewGBvskX1pWA/s8sdTo:WFzDqa86hV6uRRqX1evPlwAEdM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bd13a28f62855a85170033ee25f73c387b512b0042be9314981887074393d0f
Files
-
1bd13a28f62855a85170033ee25f73c387b512b0042be9314981887074393d0f.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 158KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ