Static task
static1
Behavioral task
behavioral1
Sample
d89787191bcbb0685fe37fb26409367f1b00a23e4f578081785f7dba7aa2a9ce.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d89787191bcbb0685fe37fb26409367f1b00a23e4f578081785f7dba7aa2a9ce.exe
Resource
win10v2004-20230220-en
General
-
Target
d89787191bcbb0685fe37fb26409367f1b00a23e4f578081785f7dba7aa2a9ce
-
Size
578KB
-
MD5
86ef5dd58f4ad541fc05026a786469da
-
SHA1
b923198865ffb8b936c284cf0fde0d54201548db
-
SHA256
d89787191bcbb0685fe37fb26409367f1b00a23e4f578081785f7dba7aa2a9ce
-
SHA512
18402fc482d57685278872739fcedd93d843a0681d46b019110e395e206438cd6e46a40bb81dee94f89418cad8c13be0863bd20c9133e7c80e1ceff90e33a1e5
-
SSDEEP
12288:VAg6Vsn23x920SvoCdOLbIHk7HhfEgRnzzPz9UhpIkarEke:VAdVBx9fSwhMe+mz7WmPe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d89787191bcbb0685fe37fb26409367f1b00a23e4f578081785f7dba7aa2a9ce
Files
-
d89787191bcbb0685fe37fb26409367f1b00a23e4f578081785f7dba7aa2a9ce.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 569KB - Virtual size: 569KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ