Static task
static1
Behavioral task
behavioral1
Sample
64b05e3470b49d54fe9bb8600485c69d11d6d6f583326c40479c629fb26c6b72.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
64b05e3470b49d54fe9bb8600485c69d11d6d6f583326c40479c629fb26c6b72.exe
Resource
win10v2004-20230220-en
General
-
Target
64b05e3470b49d54fe9bb8600485c69d11d6d6f583326c40479c629fb26c6b72.exe
-
Size
95KB
-
MD5
670408ba5a15634873749c7a647bb31d
-
SHA1
2ed667d6318450eaeac4e6ec871f7e36efac33af
-
SHA256
64b05e3470b49d54fe9bb8600485c69d11d6d6f583326c40479c629fb26c6b72
-
SHA512
7810d6efd317738bfad1231d9a480dcb266cb1bd0e7d3f2ab4fd00b9e5d0ccd5bb531af8300df0905318a27e2da13ea16f7ee845b5d83ac2f355100ced27fc4b
-
SSDEEP
768:5qxc8nXHwVgC8OMGvq3mJEy0ggggglggggJgggggggxhvxeQHXcPYT7N3L4T52Wd:iXQVgRqqWJkvxeQL3LsEW/xwG/V1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64b05e3470b49d54fe9bb8600485c69d11d6d6f583326c40479c629fb26c6b72.exe
Files
-
64b05e3470b49d54fe9bb8600485c69d11d6d6f583326c40479c629fb26c6b72.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ