Static task
static1
Behavioral task
behavioral1
Sample
13a290c3fda2eeb5e03c4444c6bd46da110b45159273917597bcc7958a6b6968.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
13a290c3fda2eeb5e03c4444c6bd46da110b45159273917597bcc7958a6b6968.exe
Resource
win10v2004-20240426-en
General
-
Target
13a290c3fda2eeb5e03c4444c6bd46da110b45159273917597bcc7958a6b6968
-
Size
582KB
-
MD5
7bb38b2abd3b8dc7e1628ab7fd82c979
-
SHA1
98b0aee457bb540b96f9b39f80ce35208f7e3c86
-
SHA256
13a290c3fda2eeb5e03c4444c6bd46da110b45159273917597bcc7958a6b6968
-
SHA512
3a9d4cf4d4d779de61f50076dcb01d39c184d34e0bc07e9d18d7f9c684700ef38b528f8881fe7ac71ab59746ded532390aaef74a9fa449cca4d4d217288b7d96
-
SSDEEP
12288:cqmpplpGoGL3etQoMiXM8gxf/Sj4yESYznyVaFZvk/hLkR4:+563ey8gZqj4yESYccEhIK
Malware Config
Signatures
-
Detects executables packed with ConfuserEx Mod 1 IoCs
resource yara_rule sample INDICATOR_EXE_Packed_ConfuserEx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13a290c3fda2eeb5e03c4444c6bd46da110b45159273917597bcc7958a6b6968
Files
-
13a290c3fda2eeb5e03c4444c6bd46da110b45159273917597bcc7958a6b6968.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
����t Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����c Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE