Static task
static1
Behavioral task
behavioral1
Sample
12643550075d3ce3a878374d946ac035.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
12643550075d3ce3a878374d946ac035.exe
Resource
win10v2004-20231215-en
General
-
Target
12643550075d3ce3a878374d946ac035
-
Size
219KB
-
MD5
12643550075d3ce3a878374d946ac035
-
SHA1
1473f320dd7e9d9d74273d302dd10011748b23dd
-
SHA256
c411e5be27860660cd0db56bfa3e56df9983a925b9aad14093eddfc4f3b745d9
-
SHA512
c0a3bc7e4d100bfdb3d8339ca58f4387a1deb512d735d31f0874d9aab7646feb5d12dd1a4eab95311fe1b704ef8be40ef7d2024e1a1e8a2b60f3282ca348295e
-
SSDEEP
6144:rB/ooGxEM4bPJqzSFbr3EhSv1Vcv1EEt:1whxR4bPQzUr32c1Vc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12643550075d3ce3a878374d946ac035
Files
-
12643550075d3ce3a878374d946ac035.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 157KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.x01 Size: 16KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yP Size: 12KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE