Static task
static1
Behavioral task
behavioral1
Sample
012e253db06014230c0d2965419700f7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
012e253db06014230c0d2965419700f7.exe
Resource
win10v2004-20231215-en
General
-
Target
012e253db06014230c0d2965419700f7
-
Size
507KB
-
MD5
012e253db06014230c0d2965419700f7
-
SHA1
6b9c72296b82888ba825c8acded6a7e6a4f915b8
-
SHA256
8b6925fc493b486bac6bdf6b4307b071c3455aedb9a601ef0981bef2b96ca0ec
-
SHA512
e017c87db5bb7e093a9e40fdbfa1a78dece30cd092574f302bb461cb80a4452949239501959376265164a23ec6736fe7851f8ae953ce262a5029b2c9ba2cd2e4
-
SSDEEP
6144:e+YQmDsKjLLU8KtY3CoxxcwHmugVPpMJFGzeL5PiKJ/ZPmP50UUVJIXAw70Noa:e+YQKjLLum1/FzPiscP5BUY1oNoa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 012e253db06014230c0d2965419700f7
Files
-
012e253db06014230c0d2965419700f7.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 365KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ