Static task
static1
Behavioral task
behavioral1
Sample
12b676f7e9f8583771832a927f16d2bb8a110b3a68f3a80950f9b8657db21e74.exe
Resource
win10-20231020-en
General
-
Target
12b676f7e9f8583771832a927f16d2bb8a110b3a68f3a80950f9b8657db21e74
-
Size
3.3MB
-
MD5
fd8c58e435205aa0b3b242d199899fd1
-
SHA1
67c4755c6efde513a30c6dff78c0a1135206ae25
-
SHA256
12b676f7e9f8583771832a927f16d2bb8a110b3a68f3a80950f9b8657db21e74
-
SHA512
1b968fbb0372cdc434b8c1c01924ed1a47459d431f84a2b725ff40cc1a608e20fe24f8296e529d6f490091e02fe9602d44222bb4103bf57d3ae180c105d2a097
-
SSDEEP
98304:pGgdaNnnnRVNmjfJW4N66Lyq/jU/ON6SXFIAlE:fdKnPoW4NHLV/j+ON5XFIAu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12b676f7e9f8583771832a927f16d2bb8a110b3a68f3a80950f9b8657db21e74
Files
-
12b676f7e9f8583771832a927f16d2bb8a110b3a68f3a80950f9b8657db21e74.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ