Static task
static1
Behavioral task
behavioral1
Sample
680a61a7bf8b1ced438bba64098482455b8a503e0a35315bf6c9490d3311e9b5.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
680a61a7bf8b1ced438bba64098482455b8a503e0a35315bf6c9490d3311e9b5.exe
Resource
win10v2004-20230220-en
General
-
Target
680a61a7bf8b1ced438bba64098482455b8a503e0a35315bf6c9490d3311e9b5
-
Size
929KB
-
MD5
a1c3e77b4a4e1ae19f714313c5a8ff89
-
SHA1
1ba21f986566e23b29831e00fc5a648d28f2065c
-
SHA256
680a61a7bf8b1ced438bba64098482455b8a503e0a35315bf6c9490d3311e9b5
-
SHA512
1327df09dde920d1125e80503c7011a6dfc539a360166605f4d75b36f2e9147b808930e8ca08dd3398efb07cd6ddfd5aa24a36c0173d2d107d1848f3704d6f20
-
SSDEEP
12288:k2iNfUFotEvZ415CylQTYJ8aJ3yfC3hWcXPwH/NnYJR3Q+mIHJASbVd9poJZ:k1Bs0qZ4PzysVj3QmBJR3QARbVd9pof
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 680a61a7bf8b1ced438bba64098482455b8a503e0a35315bf6c9490d3311e9b5
Files
-
680a61a7bf8b1ced438bba64098482455b8a503e0a35315bf6c9490d3311e9b5.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 927KB - Virtual size: 926KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ