Static task
static1
Behavioral task
behavioral1
Sample
7f14e12363b805f2d32730a070f13b5b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7f14e12363b805f2d32730a070f13b5b.exe
Resource
win10v2004-20231215-en
General
-
Target
7f14e12363b805f2d32730a070f13b5b
-
Size
2.8MB
-
MD5
7f14e12363b805f2d32730a070f13b5b
-
SHA1
1761e63e636d8164cd593169c5f36e5e036a96f5
-
SHA256
73fa66e93384a78993373b967543dd7a2dcf9f7e6d1c51badb35cb2f21b8150f
-
SHA512
9385afd57a55226a0a06ca1e8708b7871958372b73a537bac8bfed59a6371472c0923a48fff5c20f8e15ceaeb0b931a386839c15d530eba677b71bcb810343da
-
SSDEEP
49152:e4CSd3tv7VQCBXRONm8u13KFz0CjbJGQfKa5qen0CcDBe23ZKtFS9sKPFThyTymR:e413tTTXim8u1ZUJ1N4a0CcDBeY4tFhn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f14e12363b805f2d32730a070f13b5b
Files
-
7f14e12363b805f2d32730a070f13b5b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 2.0MB
IMAGE_SCN_MEM_READ
VProtect Size: 260KB - Virtual size: 260KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
VProtect Size: 28KB - Virtual size: 28KB
IMAGE_SCN_MEM_READ