Static task
static1
Behavioral task
behavioral1
Sample
130cb2348aa288bf648f49a308d762a0b6a368f6899778c92f2f7905a1a00532.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
130cb2348aa288bf648f49a308d762a0b6a368f6899778c92f2f7905a1a00532.exe
Resource
win10v2004-20240611-en
General
-
Target
130cb2348aa288bf648f49a308d762a0b6a368f6899778c92f2f7905a1a00532
-
Size
1.2MB
-
MD5
3cd231feb8bfbf5d6f0cb21ff7864a18
-
SHA1
e48b06def6224d4e47b7c5ab91066e9bacdebe35
-
SHA256
130cb2348aa288bf648f49a308d762a0b6a368f6899778c92f2f7905a1a00532
-
SHA512
b8c641bb4c88036b03a1622a32f397e6f5d9797d47df62d6e63fc60b2fe41ae2b144ca313c5d175e2050479fa83e7c9826cab10d7ea5720bd241cd93932ffed3
-
SSDEEP
24576:Ot810DmyyyCxYv1vka5Ms6f4kZkij+DfOclMPwGdynw9yKwPd0JWCJT0Q2UijCsB:Ot81JyNCWvt1MsKYzvGokJJWoTB3ijxB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 130cb2348aa288bf648f49a308d762a0b6a368f6899778c92f2f7905a1a00532
Files
-
130cb2348aa288bf648f49a308d762a0b6a368f6899778c92f2f7905a1a00532.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE