Static task
static1
Behavioral task
behavioral1
Sample
941a01878f1694106f0822a8b332f62135e5c61412c6e144ece4f2ba1d481927.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
941a01878f1694106f0822a8b332f62135e5c61412c6e144ece4f2ba1d481927.exe
Resource
win10v2004-20230220-en
General
-
Target
941a01878f1694106f0822a8b332f62135e5c61412c6e144ece4f2ba1d481927
-
Size
669KB
-
MD5
371d0b20cfdf1144f35a6da1c5a39bcc
-
SHA1
242f22d126fd8ccc7c1a1d441a8a9a1503fe79d3
-
SHA256
941a01878f1694106f0822a8b332f62135e5c61412c6e144ece4f2ba1d481927
-
SHA512
99b864d9acaf4253304688e420b25b08df390965f4835bb36d27407073641abcdc72bfe1faa64c6afc5c19375e13f74c1a8b9a1808ca4ff07062c06d6f5e3009
-
SSDEEP
12288:HK+7z5GoJiGaq5auY2AUdWkUd+xJqh5ietodjV+FuH0XNXMxbSlHbZuDGzKJcEcd:l5GoR5adyE+SKNdjV+U0XN8glFLz2cEI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 941a01878f1694106f0822a8b332f62135e5c61412c6e144ece4f2ba1d481927
Files
-
941a01878f1694106f0822a8b332f62135e5c61412c6e144ece4f2ba1d481927.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 666KB - Virtual size: 666KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ