Static task
static1
Behavioral task
behavioral1
Sample
138ffe692fbdb5e042f95db486fa1b52.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
138ffe692fbdb5e042f95db486fa1b52.exe
Resource
win10v2004-20231222-en
General
-
Target
138ffe692fbdb5e042f95db486fa1b52
-
Size
45KB
-
MD5
138ffe692fbdb5e042f95db486fa1b52
-
SHA1
a32ea53ed47f07166dc6a2aa4edbce5a0e88c8fa
-
SHA256
679a48e4eb65f1722f192566d94facf13439b4b07374d10c62b5e5132ea52c09
-
SHA512
a47c2ab43d8c9b66006d98c7b093ef34cf0693c1df3231d95362ac5bf586dd73dfa3bc5e16c302192d76f6478289016cee2f7b5ebd359ff32da9fb0c0c80cd99
-
SSDEEP
768:Qw1md/3gGa+R3v+JNe+mP4j5/nvVpOW38rrLqT9zM4sfny2QYXNfN8U2:Q5qGlRGNjmP4j53OW3U/+9zM1/DFNfNQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 138ffe692fbdb5e042f95db486fa1b52
Files
-
138ffe692fbdb5e042f95db486fa1b52.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
code Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE