Static task
static1
Behavioral task
behavioral1
Sample
1253af3db5c7c8c0bbaf67c819d3d1ca.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1253af3db5c7c8c0bbaf67c819d3d1ca.exe
Resource
win10v2004-20231215-en
General
-
Target
1253af3db5c7c8c0bbaf67c819d3d1ca
-
Size
3.0MB
-
MD5
1253af3db5c7c8c0bbaf67c819d3d1ca
-
SHA1
794995ac0f3a3eddf54b9a21ce31f1428fb9ebd3
-
SHA256
5bc3367b3530ff3d045b26d796ee9c74cbc71ea3d5f045f60549c8b69e7fdc73
-
SHA512
b03cb20388237dc84f2fd823c693e7750d2fd24ab542bf262245ed58416ec43dffa6c812cc8d22a2754f0f85326d0d8eed9c82817255f5fa322280e1fdaed369
-
SSDEEP
49152:dfoRA3lryGWGj89r4MZ1bQAB5rnj1f9GzohaQi1rI7c+Vtbv7rD+lp7zErxLQo8a:pw++t9l1XB5rjqUcc7D8p/ENPpr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1253af3db5c7c8c0bbaf67c819d3d1ca
Files
-
1253af3db5c7c8c0bbaf67c819d3d1ca.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ