Static task
static1
Behavioral task
behavioral1
Sample
123123.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
123123.exe
Resource
win10v2004-20241007-en
General
-
Target
123123.exe
-
Size
1.1MB
-
MD5
12cd6d4eeb407906eedbc0b1f4b0f6b7
-
SHA1
438fdf39c97484407c506b003aa81184b5bf48ef
-
SHA256
38358ae773d721939f0d7e8f6b78edd6e0200f3db3f69f1f5bf8a20ef47a394f
-
SHA512
96c0adc8041410cb5c922ab5c8942635e58547cac29791bc6a2dad9bbd6e06937c2b9785cbb9dd9b8a67e11d7007588aea265ce411928f60f38688f036045d1c
-
SSDEEP
24576:WDNAd93ox8aPGwu5sFE4VSsw1GtLoAHp9pNX5zCI2zev5puga1Tk4xbBby:Wad93ozywt7J9DX554wMb0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 123123.exe
Files
-
123123.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 60KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 174KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 907KB - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE