Static task
static1
Behavioral task
behavioral1
Sample
0d4950c69afb9b3c9b2d52b7b5ae9d41.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0d4950c69afb9b3c9b2d52b7b5ae9d41.exe
Resource
win10v2004-20230220-en
General
-
Target
0d4950c69afb9b3c9b2d52b7b5ae9d41.exe
-
Size
542KB
-
MD5
0d4950c69afb9b3c9b2d52b7b5ae9d41
-
SHA1
83d808fb0f8b8e35fc9ffa92fa0ff6e90bb55da0
-
SHA256
a3e34d9df2e5ed18ecb2236c44428ecb068bf476767eb482e0812eeb761071fd
-
SHA512
e4c81c5c28229566513ed59baade14f9ed2c197d7c38345a68a36eede6e5f7c538e081e2969089e37d25510e919f1f8f35d4c8bcea548094306e48923b216769
-
SSDEEP
12288:7LalT62iZFFmfaG/I2U7ttsqbEvxA9RDM6uARdWzMM:qY2uFmfaG/I2ULBb2A/DM6dEYM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d4950c69afb9b3c9b2d52b7b5ae9d41.exe
Files
-
0d4950c69afb9b3c9b2d52b7b5ae9d41.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 540KB - Virtual size: 539KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ