Static task
static1
Behavioral task
behavioral1
Sample
130bc8c02027f7097c0c464a022af85a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
130bc8c02027f7097c0c464a022af85a.exe
Resource
win10v2004-20231215-en
General
-
Target
130bc8c02027f7097c0c464a022af85a
-
Size
317KB
-
MD5
130bc8c02027f7097c0c464a022af85a
-
SHA1
3f7218e9116fe3b22cfe23d2b8647a117371959f
-
SHA256
5a92d5a25f0df78fbefa699bb45f4112fe61809141e6338a22b4dd17cae4cc2c
-
SHA512
39999bf36a76ae048b62942cf961ab7583d418c1b77bc557f3aa79470263115cbdc94419b2790870acc6f3c730cdbecd9511ccfef3ba94002e76f4e2124eaae4
-
SSDEEP
6144:byr1fcDPZIDeYxqdSzCWPu7g/Hc2dwv/rCPCE+nPTzojQNHJCOyZUDfQ6w6BumCd:Or1fcCDy8zt/Hcmwv/rCK1nCQNHJKwsd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 130bc8c02027f7097c0c464a022af85a
Files
-
130bc8c02027f7097c0c464a022af85a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 257KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE