Static task
static1
Behavioral task
behavioral1
Sample
30f8bee6e5c7d783dbe76939d68d5ebe.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
30f8bee6e5c7d783dbe76939d68d5ebe.exe
Resource
win10v2004-20231215-en
General
-
Target
30f8bee6e5c7d783dbe76939d68d5ebe
-
Size
17KB
-
MD5
30f8bee6e5c7d783dbe76939d68d5ebe
-
SHA1
b12096d758187e9d7ca1ebe9f844d41176b921f7
-
SHA256
e6ffe0a1b1469e58a53633ae3947db583be8f27f9275d4fae3f52dfb14576497
-
SHA512
0e246a1e83366bc618a2b05b25a0f2fe6f88ee005f517c754270e495308e4937ebd53c5f342922d4e56eb9bfbc3998a026d3ad2f1cfafabc196f28d49ff36aff
-
SSDEEP
192:4ZZ/KsnI/nnnnnnnnnnLuMi6yZKoQCwtIUwA/O7QBgHVOEaaZn3m7DXMPZM9:oN+juMiCoYtIUwvMK1OEaaZn2fcPa9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30f8bee6e5c7d783dbe76939d68d5ebe
Files
-
30f8bee6e5c7d783dbe76939d68d5ebe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 99KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ