Static task
static1
Behavioral task
behavioral1
Sample
12689b22dbf84d0e059d5fdd4cf72490.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
12689b22dbf84d0e059d5fdd4cf72490.exe
Resource
win10v2004-20231222-en
General
-
Target
12689b22dbf84d0e059d5fdd4cf72490
-
Size
515KB
-
MD5
12689b22dbf84d0e059d5fdd4cf72490
-
SHA1
7021067706ffdb36d30ef6fce5d0355dd6402d97
-
SHA256
b967872d92ac46b28a04f6b878a0488656f8bdc4d70d7a827b488ca48ba0934c
-
SHA512
434c8b52746f26eba3b6ae43c6d50f59b81d6c6cd6150bc6255a7a7a2cc5f48435e77a8a76c9b97368231e3d733e31fac6f2205c3df336c8396737c3e34247eb
-
SSDEEP
12288:Wurx5lZb/EetEmLlfeNcUhs18c+nFatbLd:WAnFonhs1h+nFm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12689b22dbf84d0e059d5fdd4cf72490
Files
-
12689b22dbf84d0e059d5fdd4cf72490.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 376KB - Virtual size: 376KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ