Static task
static1
Behavioral task
behavioral1
Sample
134f5fad6c0d0c1fa05840a560d0aa21.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
134f5fad6c0d0c1fa05840a560d0aa21.exe
Resource
win10v2004-20231215-en
General
-
Target
134f5fad6c0d0c1fa05840a560d0aa21
-
Size
788KB
-
MD5
134f5fad6c0d0c1fa05840a560d0aa21
-
SHA1
9e1475159b76e0cc290927c4bcc37ea2e7faa23d
-
SHA256
25ead78514111ff0f7ae649ca55af54e8c678e5b4abe5337c29e1ff30ed85d68
-
SHA512
6637bcebebf8221ca2b5e46ec6c1c637b82a64d23510e0e9de333f13cb968263acdbb95a51aef5feba52c9ee5f090519265625ff7b6c91079a937488e110b2af
-
SSDEEP
12288:VKK//tQJz/l5F+gsTcaX0yYhCL2j7dftLSYyALYJPpCRcPqw+o/WVEnZNGO:VKKXol5jHPhCaj7dUb5oBoUg7P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 134f5fad6c0d0c1fa05840a560d0aa21
Files
-
134f5fad6c0d0c1fa05840a560d0aa21.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 525KB - Virtual size: 525KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ