Static task
static1
Behavioral task
behavioral1
Sample
13b0bea31087888ca27812b67d5af083.exe
Resource
win7-20231129-en
General
-
Target
13b0bea31087888ca27812b67d5af083
-
Size
398KB
-
MD5
13b0bea31087888ca27812b67d5af083
-
SHA1
5a2afc5872326165a332513d38025f89e4f8afc2
-
SHA256
b7326bdb876cc3c0b6db6315121417bc98281a460adf80676b41ba87f8ed7c3b
-
SHA512
54fb992214bdd4a7151e65e2ec3dd7df7d8348e7fe618eafb40e2a718324febe8ce7467edeac3bfcaa8e0fbaf2b3bc8dc5156437a644cbc3ac364d6983926751
-
SSDEEP
12288:8L8eOXQH9E/dxTxcznFndJugqMtLK3uYetJb5:8L8eO80zTxcrFndggEhUH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13b0bea31087888ca27812b67d5af083
Files
-
13b0bea31087888ca27812b67d5af083.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ