Static task
static1
Behavioral task
behavioral1
Sample
13637fdfa8921df845807ef467d5e0cb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
13637fdfa8921df845807ef467d5e0cb.exe
Resource
win10v2004-20231215-en
General
-
Target
13637fdfa8921df845807ef467d5e0cb
-
Size
920KB
-
MD5
13637fdfa8921df845807ef467d5e0cb
-
SHA1
eea72f08ca1eb3a077daafd11008af8d014f458e
-
SHA256
66f4135e4b9b4ffcde3ed198bd0185c609d0727b45ac960810c079d4b3f03f51
-
SHA512
31f3b2727d889c0c6f6885743413f807449f0879d72c1b6823d7f95d7571fa66a637cf2104f68915c17f98acc2664b2b1899a38da0e8dc2e16a2ea039a71444d
-
SSDEEP
12288:22wshI5K2wQaQgKTON5tp+AdBeZJHQy5fJ1GLk2miLP2swnfoWmE1sW:iZTO9BqHQy5Sk2vP9zWm8sW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13637fdfa8921df845807ef467d5e0cb
Files
-
13637fdfa8921df845807ef467d5e0cb.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE