Static task
static1
Behavioral task
behavioral1
Sample
1349574df0f761631085a61f2799c670.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1349574df0f761631085a61f2799c670.exe
Resource
win10v2004-20231215-en
General
-
Target
1349574df0f761631085a61f2799c670
-
Size
863KB
-
MD5
1349574df0f761631085a61f2799c670
-
SHA1
063e9af3c25f2b98f3244de3e132724c7fe5080e
-
SHA256
d8b0040b39484233cb129ab620ee9f3eb5e00f4fce9ca72729453a89f3c15691
-
SHA512
3c3ea18aeb9d9ce75e2c0b8ea8d97b806f43a9fb08751627ee526e7fa8a40acb7a2af965183bbace37b1b34211b3da8a9b9b76a943e63dde16f1ffed0617ca21
-
SSDEEP
12288:RmWWsG0MDVugbPXejoe54JgbjTJcw/Xb16i27BKDl+5WhK/44SisOoP3qWE8gJGU:RmWiPTG54JgL626iOx/4RiQE8gJG7zhC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1349574df0f761631085a61f2799c670
Files
-
1349574df0f761631085a61f2799c670.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 646KB - Virtual size: 646KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ