Static task
static1
Behavioral task
behavioral1
Sample
112a5e935f90567c749885b911f481da.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
112a5e935f90567c749885b911f481da.exe
Resource
win10v2004-20231215-en
General
-
Target
112a5e935f90567c749885b911f481da
-
Size
43KB
-
MD5
112a5e935f90567c749885b911f481da
-
SHA1
8f17e52c9fbae1c0a360245a124f21d857dee6f6
-
SHA256
e2fd98753ef98fd7245d4ee6433de32fd34641dd7d392cab7922efabe4ea1f37
-
SHA512
1dd8c6b1063c4a1116cf373dbb59e1773bd2f68ac6cee9786d64342d2b308333a0056cf7f44c19a6417e37ea931c7cf223f18ecc8925db792255f0fb6c795085
-
SSDEEP
768:djxaRBhMmyp3ISAEWhdcxZ69Dkx0FGzH5PJNPPhjQn3JxNfHhwWkYZ2VQL4OGq0n:djCBLypAx3k6Zk8eBBEZf/hwLPQL4j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 112a5e935f90567c749885b911f481da
Files
-
112a5e935f90567c749885b911f481da.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 659KB - Virtual size: 659KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ