Static task
static1
Behavioral task
behavioral1
Sample
120f4bb0bdf2370facfbb885aa3d0178.exe
Resource
win7-20231215-en
General
-
Target
120f4bb0bdf2370facfbb885aa3d0178.exe
-
Size
96KB
-
MD5
120f4bb0bdf2370facfbb885aa3d0178
-
SHA1
793ec84b18c2e1f855e4a6f2f0f08441ed664d21
-
SHA256
841bc00d235c5df51e9933763c1a317528490e449841d44d46a4245176d44bee
-
SHA512
bb1f83ae9e5a616bd07bb97511f0d94cabb2bbbecaf66734b3579e830b446ba53e619d632f9e122a7001b55aca2d9b6c87ae115f0405e85fbd108a766ef19562
-
SSDEEP
3072:ZhoUOSuvb2L6/7G4vearvw84cAZdHgfvd:Pi46/7bBv8b5gfl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 120f4bb0bdf2370facfbb885aa3d0178.exe
Files
-
120f4bb0bdf2370facfbb885aa3d0178.exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 90KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE