Static task
static1
Behavioral task
behavioral1
Sample
12f9af8a44205aad4de2e6cd449899db.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
12f9af8a44205aad4de2e6cd449899db.exe
Resource
win10v2004-20231215-en
General
-
Target
12f9af8a44205aad4de2e6cd449899db
-
Size
2KB
-
MD5
12f9af8a44205aad4de2e6cd449899db
-
SHA1
10f909c421c24b2f8455b1f5872986c74e5c933c
-
SHA256
1790ae0abd2052d24d09565c6d22e71a12d9cd8eadae79f9f7153acf43fcf5d7
-
SHA512
d3c07151308a302ee3b5099bba9ffd292c966470a8b298b120c2b6c82b1dbda7b8c55a829ddc8eac9dd0703178fba09f15cfd91fd3bb173d70536f760a558f9b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12f9af8a44205aad4de2e6cd449899db
Files
-
12f9af8a44205aad4de2e6cd449899db.exe windows:4 windows x86 arch:x86
ed752be7b437aead73b91250ffe08feb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
ExitProcess
user32
wsprintfA
Sections
.text Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 246B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE