Static task
static1
Behavioral task
behavioral1
Sample
13a7a70e29423f86d166656572d3f62f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
13a7a70e29423f86d166656572d3f62f.exe
Resource
win10v2004-20231222-en
General
-
Target
13a7a70e29423f86d166656572d3f62f
-
Size
50KB
-
MD5
13a7a70e29423f86d166656572d3f62f
-
SHA1
f9a70bc224170e2c814ec4c94b30711fe246518a
-
SHA256
b6933feb3482db40348f0c1eae0f6ea38978901ddbb364b2dc4bc44f6b2b34c5
-
SHA512
0f134b057e059d00e2010d48229684c6652114097fa19b8ebaf384120e331411cfb28e622facbb197ca1dee4aae7b0bd59beb6c4ee740084f2d27f06b8bc779b
-
SSDEEP
1536:S3Yayf4CaK7L3uIp/Nr2Kl7sxrp9dGq07OqkCo:S3Lywg/jpp2KpsLW78C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13a7a70e29423f86d166656572d3f62f
Files
-
13a7a70e29423f86d166656572d3f62f.exe windows:4 windows x86 arch:x86
541160bce55bf5030f1053d9ca2f310b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
ExitProcess
Sections
.code Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code1 Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE