Static task
static1
Behavioral task
behavioral1
Sample
00139fbc18f99d7705fe225d7c6559b5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00139fbc18f99d7705fe225d7c6559b5.exe
Resource
win10v2004-20231222-en
General
-
Target
00139fbc18f99d7705fe225d7c6559b5
-
Size
607KB
-
MD5
00139fbc18f99d7705fe225d7c6559b5
-
SHA1
086ff5eaaa4af7e3ca63cf23335030ede10560b2
-
SHA256
c753848b62d5753d0e97ea0371e2a4b58d27f05ffd03c8137afbf8ce31bb27df
-
SHA512
0ba9bf3e24b39e50db3bac99af00d003f848cab473f5b646ec80a258fdc7964a7813b24b49ed3836820c6a5c0e1efc33898ec412a93637ce5828df01e6c0deaf
-
SSDEEP
12288:Yp6+rdgAp9qiawi4SoLuY9WCewe75QoXgVR7yabHUnT8rxc2/uu4MCaZg2ZKx:Yp6Kd4wi4SoSYwSYwrbHoTT1MCT2Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00139fbc18f99d7705fe225d7c6559b5
Files
-
00139fbc18f99d7705fe225d7c6559b5.exe windows:4 windows x86 arch:x86
b7aa5ad21fef535197ce43d189c00604
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteAtom
Sections
12 Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
12 Size: 605KB - Virtual size: 608KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ