Static task
static1
Behavioral task
behavioral1
Sample
12ddf614ab4fa185a7348d76c10d9f79.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
12ddf614ab4fa185a7348d76c10d9f79.exe
Resource
win10v2004-20231215-en
General
-
Target
12ddf614ab4fa185a7348d76c10d9f79
-
Size
62KB
-
MD5
12ddf614ab4fa185a7348d76c10d9f79
-
SHA1
7b35f319bd772b0922ca1c72d29e2f9abbd14ad1
-
SHA256
2d391a13393e31cf030fb0dc529d0c6490176d3b31e23e6da157e7ee34300858
-
SHA512
b60394306abdad247f67fdc905de7a69c0e4a1185ece7c1e87b4b4db881819afaa6011fc78f86e98afd8c0177bb14ee09420d823a9115f16af07bcaf143bb0f6
-
SSDEEP
1536:J3gnFDY/G4JUOS5DPSJ2BpsH1yd0DRaOVqUjuq:JwFDYh2DPSJ20QOVq+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12ddf614ab4fa185a7348d76c10d9f79
Files
-
12ddf614ab4fa185a7348d76c10d9f79.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE