Static task
static1
Behavioral task
behavioral1
Sample
012683bf0150dfc9f9cc25a8a37e2d70.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
012683bf0150dfc9f9cc25a8a37e2d70.exe
Resource
win10v2004-20231215-en
General
-
Target
012683bf0150dfc9f9cc25a8a37e2d70
-
Size
219KB
-
MD5
012683bf0150dfc9f9cc25a8a37e2d70
-
SHA1
cb0576aa22dede56b9dcad635e89e3cb47dfdfb6
-
SHA256
e81c52eb9ec91f7ba35b77e4d2f9cdb83b3afaf08d1a934901d0df8176d04776
-
SHA512
c1168c3034121ee95c7232f51d8778d8dc9c0201e954f6f55b23915b4d311a1d4645a05427cccfc0bb98802c8dfd20f3e4d1c98623ea347311445de25fefb269
-
SSDEEP
6144:GzU7mQnwjw2JBXBijRQtHZcXF7m/hn1N2frBIvC0:GzU/2JBXByNK/hn18c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 012683bf0150dfc9f9cc25a8a37e2d70
Files
-
012683bf0150dfc9f9cc25a8a37e2d70.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 257KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 177KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ