Static task
static1
Behavioral task
behavioral1
Sample
07cb12d768332bbde117a615c7fded72.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
07cb12d768332bbde117a615c7fded72.exe
Resource
win10v2004-20231215-en
General
-
Target
07cb12d768332bbde117a615c7fded72
-
Size
94KB
-
MD5
07cb12d768332bbde117a615c7fded72
-
SHA1
9df8f556e715bdcb99097a31d37597e867223245
-
SHA256
f02268bccc0050eedfacb7265049b9a2b56d4e42ccdd69e74c7f34b6c074c242
-
SHA512
fa922e86e6c5405f3fbe79022a9d77b0e5eae69a2f602be60e29ee33790118419f266d5fe2bc78a054db1fa9267ac32dff2af18666189deba9fa736df4d0bac0
-
SSDEEP
1536:Ex/FnJUGJHjLNAacT/ha2QH8CB+9aCNKNCshF7kICMDhVFdM55ARUA7C:8/fVLJcTJfQH8CBOaQyVhmtmFGiUA7C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07cb12d768332bbde117a615c7fded72
Files
-
07cb12d768332bbde117a615c7fded72.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
.text Size: 67KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 17KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.teraphy Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE