Static task
static1
Behavioral task
behavioral1
Sample
b12a341739ebd8396fb3bfac148c10041388cedfa1629b77a3b7f88d4b6b4a32.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
b12a341739ebd8396fb3bfac148c10041388cedfa1629b77a3b7f88d4b6b4a32.exe
Resource
win10v2004-20230703-en
General
-
Target
b12a341739ebd8396fb3bfac148c10041388cedfa1629b77a3b7f88d4b6b4a32
-
Size
3.7MB
-
MD5
cf6cb92574a01381aac3e3bcac1d390c
-
SHA1
bb67cff5c50aab3ac9a3ffe66fe472b7180a4e9e
-
SHA256
b12a341739ebd8396fb3bfac148c10041388cedfa1629b77a3b7f88d4b6b4a32
-
SHA512
34201cda5d2d389f4db9ad7e1806cec7f6620f51f0c795152a426533c22abb191907d6974d1b2ae51a7f965e27b28db89efcd8b96c945473d79bae63889d21ee
-
SSDEEP
98304:uG9jUk0beRhpkeDSPcg/pLFXZ8Kbzp566l2:uG950aueDkP/pLFXZ8yD6w2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b12a341739ebd8396fb3bfac148c10041388cedfa1629b77a3b7f88d4b6b4a32
Files
-
b12a341739ebd8396fb3bfac148c10041388cedfa1629b77a3b7f88d4b6b4a32.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 3.7MB - Virtual size: 8.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE