Static task
static1
Behavioral task
behavioral1
Sample
503604112FA7B8BE8002664F2B67416C765F3B994BD54.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
503604112FA7B8BE8002664F2B67416C765F3B994BD54.exe
Resource
win10v2004-20230220-en
General
-
Target
503604112FA7B8BE8002664F2B67416C765F3B994BD54.exe
-
Size
1.8MB
-
MD5
0d94be3223266ea6bbdaecfa3200142c
-
SHA1
879279ff736a0dd8768f4d807e9d91b78d1a4fce
-
SHA256
503604112fa7b8be8002664f2b67416c765f3b994bd5457a57ae14cdceaaa0ac
-
SHA512
7f336ab06f9344ae14ae2d366958503b289f7636324f69186eee9e0f8cdec8445b7a003312a0689d1627efc32af6536f1e8ee38bc2bb790cdf7225064881e3ba
-
SSDEEP
24576:7zFesd38Ctz7uET06nE9QNZR9twp5L5ulugTvcuNSVw3XZlqGwF4bqPJrLklTG0:Vesfi6Exu5lg4mxrLklTG0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 503604112FA7B8BE8002664F2B67416C765F3B994BD54.exe
Files
-
503604112FA7B8BE8002664F2B67416C765F3B994BD54.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ