Static task
static1
Behavioral task
behavioral1
Sample
Yf9rhCPy6qUJfoj.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Yf9rhCPy6qUJfoj.exe
Resource
win10v2004-20230220-en
General
-
Target
E1A128C3F73F79210CD62F10D0C69D5E4E75368F914F95B50D86AAE1B7D220F3
-
Size
708KB
-
MD5
8dee87784856a1e542f285d96a93b04b
-
SHA1
493363c828f5773f2bb20f6ad4b59efbcd838d65
-
SHA256
e1a128c3f73f79210cd62f10d0c69d5e4e75368f914f95b50d86aae1b7d220f3
-
SHA512
5557310321f258a20caa8293ba972aa18469b83ea2cb53fd18690d7353a124afebb74f1784fa8fbe8a7a514c7a583b4fd7cfc05ce267ad1afc1748d2a539bf59
-
SSDEEP
12288:+N8tDlO3zYM5DaT7tj8u2+xCXVCrbS3vnJ5IWXTzDIun9hrv9f/++rkHDhJNi:+N8tBX4WThj8n+QXVCbS/nJiWDYo793R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Yf9rhCPy6qUJfoj.exe
Files
-
E1A128C3F73F79210CD62F10D0C69D5E4E75368F914F95B50D86AAE1B7D220F3.rar
-
Yf9rhCPy6qUJfoj.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 792KB - Virtual size: 792KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ