Static task
static1
Behavioral task
behavioral1
Sample
13b7aff7597fab1195038997f9b3a8e8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
13b7aff7597fab1195038997f9b3a8e8.exe
Resource
win10v2004-20231215-en
General
-
Target
13b7aff7597fab1195038997f9b3a8e8
-
Size
45KB
-
MD5
13b7aff7597fab1195038997f9b3a8e8
-
SHA1
81c2b98cda258c245a10eab8b5def80a0f93612a
-
SHA256
34fc82e2af81b3c531b0422d3b1ca3c205940db5477548aa0e6ed28187155290
-
SHA512
21c46fbbc02da8b3450dcd40a72892b8a0e9e030665a9d5b86841bb0217b2d7efdfde6120d6b92b62c7eaa8591796acf77f1912e98d369d42a5383c0f7956607
-
SSDEEP
768:zVsA2mn+8RwZzs7/7EuMFCvk3gZusCYUR3TwbD5jLDRXmwUm4:zR2YLIIUFCMQhCYATwX5jXRXF4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13b7aff7597fab1195038997f9b3a8e8
Files
-
13b7aff7597fab1195038997f9b3a8e8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE