Static task
static1
Behavioral task
behavioral1
Sample
13bbd260173efda913acb816a99b3168.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
13bbd260173efda913acb816a99b3168.exe
Resource
win10v2004-20231215-en
General
-
Target
13bbd260173efda913acb816a99b3168
-
Size
41KB
-
MD5
13bbd260173efda913acb816a99b3168
-
SHA1
3ba95f221f7f6e4f4e9d9ce2f6e5677903fdbe04
-
SHA256
79f3d233e23eb5a1503e7916eb9f5f6d90c0936bfc59a8a42f31c908be7ef403
-
SHA512
9de5a672b4e6e2f4ac3aaa243a9d4232b66ec6038bcc7948206d74d29ca63ec831f6a621853fcacfeb14941690c1f8588378505b9c926b8c7ac4e730ddd9030c
-
SSDEEP
768:0Hnd52O181i0x2MRZH1/SlXRSR4KZ4V8eJ8ZvIVFA0zJzXagr8bm0:0HndEOkiQ2Mz1vqbCeJIIAOhXzr8bm0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13bbd260173efda913acb816a99b3168
Files
-
13bbd260173efda913acb816a99b3168.exe windows:4 windows x86 arch:x86
39784df85859fc6856f2376bd7d3ec3d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
_except_handler3
user32
ReleaseDC
gdi32
CreateSolidBrush
advapi32
RegDeleteKeyA
shell32
Shell_NotifyIconA
urlmon
URLDownloadToFileA
wininet
InternetQueryDataAvailable
ole32
CoUninitialize
oleaut32
SysAllocString
version
GetFileVersionInfoSizeA
Sections
.text Size: 34KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE