Static task
static1
Behavioral task
behavioral1
Sample
11e87c0bd6a096402dbb019f3e10d5659afab0dee3860dfada0473ebde7382e9.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
11e87c0bd6a096402dbb019f3e10d5659afab0dee3860dfada0473ebde7382e9.exe
Resource
win10v2004-20230220-en
General
-
Target
11e87c0bd6a096402dbb019f3e10d5659afab0dee3860dfada0473ebde7382e9.bin
-
Size
318KB
-
MD5
e0f036b23171117854b5ead52095e574
-
SHA1
0cd9f242948cb98c0538908492684ad1b5fb7b19
-
SHA256
11e87c0bd6a096402dbb019f3e10d5659afab0dee3860dfada0473ebde7382e9
-
SHA512
41f1c52082dd67992feebbde12376399472a2c3b85a25e6f7d86785f8618b5178e12d4ff5108463d59ef161f7f930a92809cb74fe55a423b61c66ba764f46b01
-
SSDEEP
6144:uDTBuFxbIBMPryJc3Nz7jCbT3Cdeh2kPYjj1Z:lbNyq3NzXCvCdMC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11e87c0bd6a096402dbb019f3e10d5659afab0dee3860dfada0473ebde7382e9.bin
Files
-
11e87c0bd6a096402dbb019f3e10d5659afab0dee3860dfada0473ebde7382e9.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 315KB - Virtual size: 315KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ