Static task
static1
Behavioral task
behavioral1
Sample
13de5304e29232dc1a6a1202be58183f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
13de5304e29232dc1a6a1202be58183f.exe
Resource
win10v2004-20231215-en
General
-
Target
13de5304e29232dc1a6a1202be58183f
-
Size
14KB
-
MD5
13de5304e29232dc1a6a1202be58183f
-
SHA1
2a04d9eb354cf05335f21ee96ac7b20c2fe5bc0b
-
SHA256
e2e19a788bf75959dd693212209b145a3bddb503d94e7dd786bb619b9131c112
-
SHA512
77c8158e8e3b9eca7643a880c18bb69c2e7ecc1682f5baaea20fc50342f615e191f045a5a0ee35e2ac526a3ccb82cf39a4e7caeb0d8fa76feb23970dcb161ef6
-
SSDEEP
192:vniHqZ/KsnIMnnnnnnnnnnLuMi6yZKocxRlB1TxWu2SapKni4HJ:vuqN+AuMiCocxjT92Jklp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13de5304e29232dc1a6a1202be58183f
Files
-
13de5304e29232dc1a6a1202be58183f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ