Static task
static1
Behavioral task
behavioral1
Sample
Seatbelt.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Seatbelt.exe
Resource
win10v2004-20230915-en
General
-
Target
Seatbelt.exe
-
Size
512KB
-
MD5
7e706b487ebb90667cca4a071455110b
-
SHA1
6881a15ab797d427981526da2e221c5230a6a0e4
-
SHA256
84d265868a788a2888bcfa2c6d34021670787c23a4bdd60fca1334248cd1f3c7
-
SHA512
2cf0ad1bb4cc90a0b5a6f5e0a276e1c5f55a96c7accc254ffdc17500d7f3bdee652b504ee3e985cc84e4d58e10752bfd54aadc34018386932f6e4dd041d9886e
-
SSDEEP
6144:oNLmUWN1rADXpEcvmU4IgdskDIGs54I/+BQBIBEHbNY4BXvIwadZK7nWyFDu:ILVc11FdsD5ERsYwAK7Wy4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Seatbelt.exe
Files
-
Seatbelt.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 510KB - Virtual size: 509KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ