Static task
static1
Behavioral task
behavioral1
Sample
13b00a599adf4a61890cbd91445d2ec8.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
13b00a599adf4a61890cbd91445d2ec8.exe
Resource
win10v2004-20230915-en
General
-
Target
13b00a599adf4a61890cbd91445d2ec8.bin
-
Size
13.4MB
-
MD5
13b00a599adf4a61890cbd91445d2ec8
-
SHA1
d06563a69e4451da10481d71ddb0610519ad017f
-
SHA256
9a41f8fdcbe631d597a9902ee78f384d7518e6508274a494188a78c531657e56
-
SHA512
0ece9a759d561d3786c45e0dd0d255f650b421bf95a62bb96edceecbe12d68fa1d84a5468c099cd8dceb4cdf62a6781864fff6150aca30d630d256f5481eac23
-
SSDEEP
393216:FZRT1dK3sROLQ1iP0pmj4taHcOZGTwjSIG/EBpKZkWd:FZRT1dK3sROLQ1iP0pmj4taHcOZGwOIa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13b00a599adf4a61890cbd91445d2ec8.bin
Files
-
13b00a599adf4a61890cbd91445d2ec8.bin.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 13.4MB - Virtual size: 13.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ