Static task
static1
Behavioral task
behavioral1
Sample
12e8770fd07c877b42121209deddf7b14a1c5c658d8a1a5db50be75788acc30b.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
12e8770fd07c877b42121209deddf7b14a1c5c658d8a1a5db50be75788acc30b.exe
Resource
win10v2004-20230621-en
General
-
Target
12e8770fd07c877b42121209deddf7b14a1c5c658d8a1a5db50be75788acc30b
-
Size
821KB
-
MD5
de899a245f0f0781e867245229b9fc07
-
SHA1
7494a9d995d93fdf56e954d7b9e761ec1d59e7f5
-
SHA256
12e8770fd07c877b42121209deddf7b14a1c5c658d8a1a5db50be75788acc30b
-
SHA512
012a0df6d8ae18089e43a8f103c195b00e0ec1883de06058437bbab7bd5a98c130d137dafe6085b4a1d16aab3cda660ee31c6a82ef8b4c5b2f350b518cc83ea5
-
SSDEEP
24576:GvHXeteA3qfjYijBdNwLfjTC8xxDZfIgd:6HXCrABMTDZAgd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12e8770fd07c877b42121209deddf7b14a1c5c658d8a1a5db50be75788acc30b
Files
-
12e8770fd07c877b42121209deddf7b14a1c5c658d8a1a5db50be75788acc30b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 75KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 15KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 371KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 345KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE