Static task
static1
Behavioral task
behavioral1
Sample
813.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
813.exe
Resource
win10v2004-20231020-en
General
-
Target
813.exe
-
Size
140KB
-
MD5
cae34ee81b52d472ff10e650f42a456a
-
SHA1
b413c42ab316c427ad8f2a337a5360a69b3f961c
-
SHA256
bfa2656965822e697ce6987131b8218a8fdbdd48a497bb44d8d617b140f0ef0a
-
SHA512
4bbeb6aeee6c734bd43ff50d9431da9619e2fe4c4cf1724d7289bbe4cfd93ee477ef1f7322bef757a88cc9b86d7d6c94cc5b2c692798caa43ee1dbe1264a1d2d
-
SSDEEP
3072:EsIXznkJVVFErTw4EvQWsHfiJ/kIWccjFpi:IXzkzV+ruCfiiIWd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 813.exe
Files
-
813.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 128KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ