Static task
static1
Behavioral task
behavioral1
Sample
c2f6c30ed608d3ae1828d6af2aaf97052bc41b409e5b820ffb3f99dccfc0813c.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
c2f6c30ed608d3ae1828d6af2aaf97052bc41b409e5b820ffb3f99dccfc0813c.exe
Resource
win10v2004-20230220-en
General
-
Target
c2f6c30ed608d3ae1828d6af2aaf97052bc41b409e5b820ffb3f99dccfc0813c.exe
-
Size
11KB
-
MD5
022aee066b65039dde6dd2bd7d36669a
-
SHA1
b9505e695b50da3b332042f7b0b9324c67f76c05
-
SHA256
c2f6c30ed608d3ae1828d6af2aaf97052bc41b409e5b820ffb3f99dccfc0813c
-
SHA512
10631980805abc2236131afdf1e6d1a5069fede277101d1839bfe5fe48b54a8556bdef7d9ee40fb5296c0ac35d6ac41069497d66bac5502b30041e7149919021
-
SSDEEP
192:eiTffffnLoLsKLmL1L5B3FlLBnIYGslY43jP4Rj/CFunQ:eiTffffnLoLsKLmL1L5TlL5IYGmn0ROm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c2f6c30ed608d3ae1828d6af2aaf97052bc41b409e5b820ffb3f99dccfc0813c.exe
Files
-
c2f6c30ed608d3ae1828d6af2aaf97052bc41b409e5b820ffb3f99dccfc0813c.exe.exe windows x64
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ