Static task
static1
Behavioral task
behavioral1
Sample
128b5ebed53685810db740e7ec8b80b9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
128b5ebed53685810db740e7ec8b80b9.exe
Resource
win10v2004-20231215-en
General
-
Target
128b5ebed53685810db740e7ec8b80b9
-
Size
464KB
-
MD5
128b5ebed53685810db740e7ec8b80b9
-
SHA1
06e9d3fe81dd5be488c645f65283379ad0eb0754
-
SHA256
20bb3c4fbc5f950ee1c319657601c1807b82985e7a5ecc768cee63961538eb8d
-
SHA512
a9ee8f5e5c1b7add69065c0ac22d26e291726e223af209edd97ea3e323e5eaae5c364225e785d13298ff424e7e5a6c46ae669beb5d70bed8ec8ed7055c927393
-
SSDEEP
6144:D1Z4cKBpgCQ/S94FPdnJhhJLefPCuGRoIm/z/opUbAXD2XXYFTEX40JarWRtxvyT:vbGVNl1E6m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 128b5ebed53685810db740e7ec8b80b9
Files
-
128b5ebed53685810db740e7ec8b80b9.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 459KB - Virtual size: 459KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 169B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ