Static task
static1
Behavioral task
behavioral1
Sample
13519179dc2c6c8de30b726b30b7c74b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
13519179dc2c6c8de30b726b30b7c74b.exe
Resource
win10v2004-20231215-en
General
-
Target
13519179dc2c6c8de30b726b30b7c74b
-
Size
108KB
-
MD5
13519179dc2c6c8de30b726b30b7c74b
-
SHA1
ae89b891a08a507e2de6d37cf024f4c02cf26c40
-
SHA256
9adf69721239d2dec7168b82fadf2297cb1785b31f1f8a1174a56a90e72a5161
-
SHA512
8932d2f4fe56083fef873a2a590cbd19dd837ef8edc1d1c98751f2e9bc859433984df9338b7e0441f7efd9c2b3627d70273e640b40f860b472a6661cd96498a5
-
SSDEEP
1536:DiX8FXcYt+l2W5KZf1zwQVgvT5Gbibmj4Jo+1sbpZ9NM:uMZ+lfKp1zwLvT5GbsmWF1sbp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13519179dc2c6c8de30b726b30b7c74b
Files
-
13519179dc2c6c8de30b726b30b7c74b.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE