Static task
static1
Behavioral task
behavioral1
Sample
129ab5d17ac641fa2712d85b651aa550.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
129ab5d17ac641fa2712d85b651aa550.exe
Resource
win10v2004-20231215-en
General
-
Target
129ab5d17ac641fa2712d85b651aa550
-
Size
125KB
-
MD5
129ab5d17ac641fa2712d85b651aa550
-
SHA1
f848377e769994e506e57dcd611bacc16d781f68
-
SHA256
1e2b36b22ac98c1e446989a58c948bc6a573fbf117f6c8f005cba1e06c1ac4d7
-
SHA512
1a0e16faf780a2f881f4544f5e9991335a2c5410797af052a4e8b3e8ff6cf6cbb5b88db5379f55158266c61de09355879ae51957d1c4bd75831e6cb4be957764
-
SSDEEP
3072:AUPKF4M+3f41zgmZq8zJoQAeC5paRkyoCNIKJ:5SgQTJoQLC5paX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 129ab5d17ac641fa2712d85b651aa550
Files
-
129ab5d17ac641fa2712d85b651aa550.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rawdat Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE