Static task
static1
Behavioral task
behavioral1
Sample
13a7c12fd6be3613fe95a11d059b3f7266fa2427e958ad5d64f9e736eb7f1259.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
13a7c12fd6be3613fe95a11d059b3f7266fa2427e958ad5d64f9e736eb7f1259.exe
Resource
win10v2004-20230221-en
General
-
Target
13a7c12fd6be3613fe95a11d059b3f7266fa2427e958ad5d64f9e736eb7f1259.exe
-
Size
688KB
-
MD5
da894a13d0ab968845c3fe816324d9d1
-
SHA1
b41bd20fc55699480ef8280ecb5d7c503691e835
-
SHA256
13a7c12fd6be3613fe95a11d059b3f7266fa2427e958ad5d64f9e736eb7f1259
-
SHA512
1128d6a2e9f788309fc87bce3220e7344c96134ddf25c88d9592fafaa40aaa82e649774cd35ad41952da6549330148e84a8294de81d925353a9804b43ec121d8
-
SSDEEP
12288:f3NHVhtEw4j7z5GoJiGaq5auwv8YNoJFYu/o6+bsv3RJDKmwkZZdyEJeDveDv80X:u5GoR5a/EYNolovbsv3RlekZLJe78v8o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13a7c12fd6be3613fe95a11d059b3f7266fa2427e958ad5d64f9e736eb7f1259.exe
Files
-
13a7c12fd6be3613fe95a11d059b3f7266fa2427e958ad5d64f9e736eb7f1259.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 686KB - Virtual size: 685KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ