Static task
static1
Behavioral task
behavioral1
Sample
iVCam_x64_v6.1.9.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
iVCam_x64_v6.1.9.exe
Resource
win10v2004-20230220-en
General
-
Target
iVCam_x64_v6.1.9.exe
-
Size
2.1MB
-
MD5
df119f101ece83008330214ce042a308
-
SHA1
4073fc410421c200e5cbeb9124b88c82f0d293aa
-
SHA256
6e2ca21fe9c1c1c51ead12e7906c0eba45187930f913d9459d633fd6c2fde6a1
-
SHA512
8252e7c770497f7349552c6fb52bfa8d111408a1c5c025bdea391a8e80efc466e4af147ffe057582de295e9e21f0d8ffae7ea1a5282918abfa1ab05498137454
-
SSDEEP
49152:cJL6iDioIkQ24Gai3cywCtwDAQWk0NNGcS6Ym5ge9+V0zf20v:C1p4Pi0CtwDAu0KcSa5P920Hv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource iVCam_x64_v6.1.9.exe
Files
-
iVCam_x64_v6.1.9.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 202KB - Virtual size: 201KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ