Static task
static1
Behavioral task
behavioral1
Sample
129d7c546bfec2043acfdce66647f76b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
129d7c546bfec2043acfdce66647f76b.exe
Resource
win10v2004-20231222-en
General
-
Target
129d7c546bfec2043acfdce66647f76b
-
Size
36KB
-
MD5
129d7c546bfec2043acfdce66647f76b
-
SHA1
53d6a92345655d26e6539fb0f1df40f17539239a
-
SHA256
19400f7f70af399b3006f521f94d52429cd7897e054f4b28cf4fa6362a6ae7ac
-
SHA512
205dd8b605315ded5265538b3b23922fbe3ed8b9c16a6cfbb884b7641533c0ff61d12217aea39816460914128182276aaf8fb6210c35754f52bd716c0309ca5d
-
SSDEEP
768:aYLMvFIYm0on6HmavZxTQffoaFNHioUQpkGo:icV6Hmavkga0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 129d7c546bfec2043acfdce66647f76b
Files
-
129d7c546bfec2043acfdce66647f76b.exe windows:6 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.data Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ