Static task
static1
Behavioral task
behavioral1
Sample
ce69ad16de81845d50c9243e8e7c2926.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ce69ad16de81845d50c9243e8e7c2926.exe
Resource
win10v2004-20230220-en
General
-
Target
ce69ad16de81845d50c9243e8e7c2926.exe
-
Size
879KB
-
MD5
ce69ad16de81845d50c9243e8e7c2926
-
SHA1
145e906caa9c618776807055fb2c2837d869da5d
-
SHA256
3c306b96216641fbd00d7d7f3259f7285174cf8d5032ad0de6c70af5622f87d4
-
SHA512
f3ca6319cde762e385c99f57e14ff0af652761a00838cc0cd99bb0d53ff84e59b1e42557ff43bc97289758cbe49bbd34393260e86a965c9e91605581a0c19b07
-
SSDEEP
12288:K3bkJMqQFHni4Iy9uYr0fCFkIuBMiDc8PrRJRvlWzC2WIgP2VD6Btl/3YtLF48xo:dGwRZRogvRvlr2WIg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce69ad16de81845d50c9243e8e7c2926.exe
Files
-
ce69ad16de81845d50c9243e8e7c2926.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 875KB - Virtual size: 874KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ