Static task
static1
Behavioral task
behavioral1
Sample
0a6e9968b41ff6c4c5dc632a22de371cc50b208db9dde57c562a69b47b3f479e.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0a6e9968b41ff6c4c5dc632a22de371cc50b208db9dde57c562a69b47b3f479e.exe
Resource
win10v2004-20230220-en
General
-
Target
0a6e9968b41ff6c4c5dc632a22de371cc50b208db9dde57c562a69b47b3f479e
-
Size
806KB
-
MD5
59f67b6a90af421f3fd11ecd3cc33f71
-
SHA1
c59e75ada745fbad404757b7e278ec0fd6b1adcc
-
SHA256
0a6e9968b41ff6c4c5dc632a22de371cc50b208db9dde57c562a69b47b3f479e
-
SHA512
059345610b322bd5eaf66442df7ff8ec98d647eff0753647d3fb7af36716481f130546926a842ec16ab59f2107a19c547c94a9051a9f942df783a51fc8d9aa93
-
SSDEEP
12288:K7HIIBGTwWddZ1S3BNuE+ezCoO3oxFYG/ML:17Z1SdTzjxxFYG/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a6e9968b41ff6c4c5dc632a22de371cc50b208db9dde57c562a69b47b3f479e
Files
-
0a6e9968b41ff6c4c5dc632a22de371cc50b208db9dde57c562a69b47b3f479e.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 402KB - Virtual size: 402KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 403KB - Virtual size: 402KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ