Static task
static1
Behavioral task
behavioral1
Sample
30c132eb08e887792ab649c797362643.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
30c132eb08e887792ab649c797362643.exe
Resource
win10v2004-20231215-en
General
-
Target
30c132eb08e887792ab649c797362643
-
Size
42KB
-
MD5
30c132eb08e887792ab649c797362643
-
SHA1
0d8c218a3a3e203519bacd3aa8fc67b4244d7ca6
-
SHA256
84273f2eaea783db7b16436f1a64b832d89f3be62870948c8f367ef67a79809e
-
SHA512
a342470f8cbebbf3e965d126446c5f95734564f45e10803651cf1a966bbcc5dc10be3e7b696547ef771f4fb4f0953d3385a4071a79cb0f8f310171e1ca7de4c1
-
SSDEEP
768:AEENWxmcnc8uK8fToRaqIjTH4uB8wP9BgUMDVStJFwwSkEZJa:HEN2myxu9Toh8cDVmq7kEZM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30c132eb08e887792ab649c797362643
Files
-
30c132eb08e887792ab649c797362643.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE