Static task
static1
Behavioral task
behavioral1
Sample
1337993a6d397fa0533f34a50c8cd17f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1337993a6d397fa0533f34a50c8cd17f.exe
Resource
win10v2004-20231215-en
General
-
Target
1337993a6d397fa0533f34a50c8cd17f
-
Size
53KB
-
MD5
1337993a6d397fa0533f34a50c8cd17f
-
SHA1
fafa46c2a6ba3a672810aff231d6b8d164e7c790
-
SHA256
fa38d67b9d34cb68e32398db1c6eaaa348c65c4b4868c4347e6700edbb96a993
-
SHA512
f60618555b9db89ec5f012ddaf1262ff14a416d40d08e6162858b5bc7dbf9b6bf56234fb795b3fd7026f613d99fbafe46325fcfac908d5a221903c8010ca07bb
-
SSDEEP
768:dElzYMqIKyiTy9D440w18q43aciUfjedVYCtaKEVs9Xz477q/ziaHK7Tw:2nqIKy9D4gBcaceYCFEVIjc7qLsw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1337993a6d397fa0533f34a50c8cd17f
Files
-
1337993a6d397fa0533f34a50c8cd17f.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ