Static task
static1
Behavioral task
behavioral1
Sample
13514d4287a523dc2b3a3fbcc208a952.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
13514d4287a523dc2b3a3fbcc208a952.exe
Resource
win10v2004-20231222-en
General
-
Target
13514d4287a523dc2b3a3fbcc208a952
-
Size
446KB
-
MD5
13514d4287a523dc2b3a3fbcc208a952
-
SHA1
bc1d53f078c0b3e56a1371197e57f682adddaf87
-
SHA256
ddf82e98cdf455403d2e97221b82c62103699495db43d49065486e12ece9185c
-
SHA512
e8930769bc6468df7ed5b5dd45fdd9c1349a48d8e6f288c0969ec64e681e7f71ea5b5370bacb746a4e74107d25a9fbc3eb664e4b3e08895af1049f8de422cf5a
-
SSDEEP
6144:cG+3mZVlNHJSc+mbI8hVgAO+w4VbVhOHJwBuQwxWNQN+nXGuqJyW8yCl6:t+3gVTJSc1hVgsbDOHhKQIXHjW8yo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13514d4287a523dc2b3a3fbcc208a952
Files
-
13514d4287a523dc2b3a3fbcc208a952.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 347KB - Virtual size: 347KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ