Static task
static1
Behavioral task
behavioral1
Sample
912813f48cc35c4b29eb690fc392dac8004542d35239652b8fdb123528eedf27N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
912813f48cc35c4b29eb690fc392dac8004542d35239652b8fdb123528eedf27N.exe
Resource
win10v2004-20241007-en
General
-
Target
912813f48cc35c4b29eb690fc392dac8004542d35239652b8fdb123528eedf27N
-
Size
64KB
-
MD5
af07a3ee9f363a59da7fc469f9198580
-
SHA1
003b72b89d09645e29ed6c7609230c110b7aad9d
-
SHA256
912813f48cc35c4b29eb690fc392dac8004542d35239652b8fdb123528eedf27
-
SHA512
0b3e58a47dcc627baf61a5ace24a25ba076fc73c59916875fb68112eceaba188cae09e0e3697175ed7e0c6672cf38c11cd3eb9d8d591843a5f610d706cf358b0
-
SSDEEP
768:fdu//o3JL950tNL7zH+sAt/iA9p19qaPFQm69a1KTiIukGQxryP4YZ2p/1H5kXdS:I1tVzH+39p19q6vhcxrG4M2LYXdZgQe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 912813f48cc35c4b29eb690fc392dac8004542d35239652b8fdb123528eedf27N
Files
-
912813f48cc35c4b29eb690fc392dac8004542d35239652b8fdb123528eedf27N.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kofbl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ