Static task
static1
Behavioral task
behavioral1
Sample
1f13009bc713675e3b717e8015f76f69.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1f13009bc713675e3b717e8015f76f69.exe
Resource
win10v2004-20231215-en
General
-
Target
1f13009bc713675e3b717e8015f76f69
-
Size
334KB
-
MD5
1f13009bc713675e3b717e8015f76f69
-
SHA1
bd0baf28b4397137f6c58b49da3079b993c09540
-
SHA256
503e1a67612f5abe48d156e2a755973bc1e031ba5e6cfe9f737c7a48deb29be4
-
SHA512
adbee2190f931530690d865cbfcc63f959aa9a160dae558c011b3f4f56dd250484ba618ea094bd80dbda8767923bd47c2471fa934486966b44e2bc46c914f529
-
SSDEEP
6144:82KneDVxWd2bmdtHMD02a/up2aOknntSI:827hbCHMD0zup2adns
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f13009bc713675e3b717e8015f76f69
Files
-
1f13009bc713675e3b717e8015f76f69.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 322KB - Virtual size: 321KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ