Static task
static1
Behavioral task
behavioral1
Sample
13859c02e9bda4bd00a531bf555170a8.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
13859c02e9bda4bd00a531bf555170a8.exe
Resource
win10v2004-20231215-en
General
-
Target
13859c02e9bda4bd00a531bf555170a8
-
Size
2KB
-
MD5
13859c02e9bda4bd00a531bf555170a8
-
SHA1
31a413d6c1adc68c1eaec5ec1a7db1a5bab30b5d
-
SHA256
e655bec752c2bfe9d0a5cb67f9da962af07771a55d63436058a56d1508928eab
-
SHA512
9c41db94af3400cadca7df74c90da3b836c18c7da02516b33ea52c55d571bb95f790bc91fd0ede20bcb22028952dfd99596d5ce40ce246ffaa0f660f94ed93ce
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13859c02e9bda4bd00a531bf555170a8
Files
-
13859c02e9bda4bd00a531bf555170a8.exe windows:5 windows x86 arch:x86
9d2ab8435c5811274e660310f84450e8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
Sleep
GetProcAddress
LoadLibraryA
CreateThread
user32
TranslateMessage
GetMessageW
TranslateAcceleratorW
DispatchMessageW
Sections
.text Size: 1024B - Virtual size: 541B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 99B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE