Static task
static1
Behavioral task
behavioral1
Sample
d013c5c57249092010f43e7b35773d59c194393b66bbee0c9d7cd3451d26c39a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d013c5c57249092010f43e7b35773d59c194393b66bbee0c9d7cd3451d26c39a.exe
Resource
win10v2004-20231215-en
General
-
Target
d013c5c57249092010f43e7b35773d59c194393b66bbee0c9d7cd3451d26c39a
-
Size
130KB
-
MD5
c24d797a8b24000167a685fad1e5c021
-
SHA1
6815bb38c5b9df7dc0acfb4936c0d93e870406cf
-
SHA256
d013c5c57249092010f43e7b35773d59c194393b66bbee0c9d7cd3451d26c39a
-
SHA512
2ecf409a713ce0b0cdc56c89ecda5439bd8ceacd68dc3ea1a19c85eaccc26dae51fc029b79351674a113c954d705f4045e7d2ba013c0efa083ae7cc7779892c8
-
SSDEEP
3072:bftffjmNox32kC1BdOeSqGRH35DdrvPv77NwQdIlHVx59:bVfjmNbud5djH77NwQdar
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d013c5c57249092010f43e7b35773d59c194393b66bbee0c9d7cd3451d26c39a
Files
-
d013c5c57249092010f43e7b35773d59c194393b66bbee0c9d7cd3451d26c39a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE