Static task
static1
Behavioral task
behavioral1
Sample
edf6c4edb5aa65ee6a36cf351602c0e0e3025a3f5cd60be527dcbaa92d7d1971.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
edf6c4edb5aa65ee6a36cf351602c0e0e3025a3f5cd60be527dcbaa92d7d1971.exe
Resource
win10v2004-20230221-en
General
-
Target
edf6c4edb5aa65ee6a36cf351602c0e0e3025a3f5cd60be527dcbaa92d7d1971
-
Size
90KB
-
MD5
d82e0525ecc2f2b3153e91b482e2829b
-
SHA1
e935ff2585e52b5da3febfd5e6a4d8f7bc5fe855
-
SHA256
edf6c4edb5aa65ee6a36cf351602c0e0e3025a3f5cd60be527dcbaa92d7d1971
-
SHA512
63ec22a9924d68f166bcc5b990843eb9ec52cb8e27ccc4312eaca100c07fedc730f6038c0d015cf5a9268ebcaf4d911ba0d6fc44627ee44bfeccb0f7a2c6c0d6
-
SSDEEP
1536:3A4MvwJLvwJQx1a8UYJWqnk49wlOdbhh/fyygoLs8WvwJap5:36vwRvwSxoqkwo2bP/KFV8Wvwgp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource edf6c4edb5aa65ee6a36cf351602c0e0e3025a3f5cd60be527dcbaa92d7d1971
Files
-
edf6c4edb5aa65ee6a36cf351602c0e0e3025a3f5cd60be527dcbaa92d7d1971.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ