Static task
static1
Behavioral task
behavioral1
Sample
129342747e1c5b4b8591bf345e82abba.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
129342747e1c5b4b8591bf345e82abba.exe
Resource
win10v2004-20231215-en
General
-
Target
129342747e1c5b4b8591bf345e82abba
-
Size
1.1MB
-
MD5
129342747e1c5b4b8591bf345e82abba
-
SHA1
279a373d66e3aee33d420977af88fa19bfaffbe9
-
SHA256
3b280a226923212bb781c072fce52eebbf4351e61577d15b787ebbbfc3e40992
-
SHA512
1c7db63da610dc25d45485a754ba9f7176bfd6cda965adaa432d90422b4a2435c0f8c3b0e96122656641f92b1661a795a722fe1ba8b4c7596a30a492f2cb6149
-
SSDEEP
24576:M+BgFIdWoW5AfRVu9BlIvhIk8nvFLfj28S:MUgFARc9bvFLf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 129342747e1c5b4b8591bf345e82abba
Files
-
129342747e1c5b4b8591bf345e82abba.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: 800KB - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE