Static task
static1
Behavioral task
behavioral1
Sample
13f63bc1ea0570d0be679f2c44ab5bad.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
13f63bc1ea0570d0be679f2c44ab5bad.exe
Resource
win10v2004-20231215-en
General
-
Target
13f63bc1ea0570d0be679f2c44ab5bad
-
Size
96KB
-
MD5
13f63bc1ea0570d0be679f2c44ab5bad
-
SHA1
dbb2ef0b38294c81d5a8458a88a8e9b51653ed54
-
SHA256
7b9c395c1782e6aee8b722212cd5b6368e1dd2f294220541581f1ae95589404f
-
SHA512
ebf46b3ea2e38bf869e83ed489a0303dba527e30c2cd1e4a3ff834015aad98ce8769a22d8e35be549019b7743332c1fa52b58da2cb5c5a87d0cee92f2e3f232b
-
SSDEEP
3072:kDHAVnbFdAVAYXC/N8Ax+iNp2fNn2Rtg3D9Sx3:0MbFHY0ND+iNIfUKJy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13f63bc1ea0570d0be679f2c44ab5bad
Files
-
13f63bc1ea0570d0be679f2c44ab5bad.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
e8ok0 Size: - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
e8ok1 Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
e8ok2 Size: 975B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE