Static task
static1
Behavioral task
behavioral1
Sample
130bdbb572ba3a39c76f2f6f5277814b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
130bdbb572ba3a39c76f2f6f5277814b.exe
Resource
win10v2004-20231215-en
General
-
Target
130bdbb572ba3a39c76f2f6f5277814b
-
Size
161KB
-
MD5
130bdbb572ba3a39c76f2f6f5277814b
-
SHA1
1e2849655818e48db74aabdf463d9cf96b30e6d6
-
SHA256
e367be44ec68dec77892a8192447c46e569faf30d2b379dc224933de97850edc
-
SHA512
14f5bc232da6f26ab6ee9a3979ec8154d12e1ea000416e8b41e481cd3368ce46b3a2f5207c758f712efa9a257e824f4e016067afc8e109a73f4f0a5f8c639669
-
SSDEEP
3072:4BAp5XhKpN4eOyVTGfhEClj8jTk+0hdKo:vbXE9OiTGfhEClq9F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 130bdbb572ba3a39c76f2f6f5277814b
Files
-
130bdbb572ba3a39c76f2f6f5277814b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 161KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ