Static task
static1
Behavioral task
behavioral1
Sample
131f41fa20be11b67fb1c268bc110f4a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
131f41fa20be11b67fb1c268bc110f4a.exe
Resource
win10v2004-20231215-en
General
-
Target
131f41fa20be11b67fb1c268bc110f4a
-
Size
3.3MB
-
MD5
131f41fa20be11b67fb1c268bc110f4a
-
SHA1
a392bfb29ddddd481704d9ab83bb72fd9d293110
-
SHA256
e222709a0bc578e3726d11c74a651efd42b4735e903e09249299d25875472893
-
SHA512
ae6a37a07cf7f78b9df14037f41e7fa8262fbab40d9acb008c5a609a0527f75c93740ad759a499f930ca6d9a9e551b0f6a7f13702a80274db6280e0d907816bd
-
SSDEEP
98304:IuM0ulvk4K0hbTY1CtY/hQCyI8sSlKyxZWRw+w6ACpPoxLCOHSj2IddAXPrTzahU:NM0L6hbTY1oYZQCyI8sSlKyxZWRw+w6G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 131f41fa20be11b67fb1c268bc110f4a
Files
-
131f41fa20be11b67fb1c268bc110f4a.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 940KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fchjmspd Size: 704KB - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
seccxzqs Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE