Static task
static1
Behavioral task
behavioral1
Sample
cef63679d9b9da5a2c716929a496bfdd.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
cef63679d9b9da5a2c716929a496bfdd.exe
Resource
win10v2004-20230220-en
General
-
Target
cef63679d9b9da5a2c716929a496bfdd
-
Size
670KB
-
MD5
cef63679d9b9da5a2c716929a496bfdd
-
SHA1
b153198a940d001903db339f3bed2cbc902c5354
-
SHA256
0fca2cfc9c5e64e93003c8a42ab67001aa5d6019de910d889411acb2eaff9e0f
-
SHA512
67c72fe7d9f7c1c8fb7d3b5a2185e707f23817acb9aeb5dcca63edc04ab08d05e92235db47e62bc9b28d99a160496417a1c1bfe83a6fb0ccaecefa4146e828ab
-
SSDEEP
12288:kjQmzZBEP85lmuwC6CCS2tgMG8jLUZUO0AJhR+:C9BEP8DwC6VlHTjLUZbV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cef63679d9b9da5a2c716929a496bfdd
Files
-
cef63679d9b9da5a2c716929a496bfdd.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 668KB - Virtual size: 667KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ