Static task
static1
Behavioral task
behavioral1
Sample
526b3f0974a4b191dd7114d56ac640c4658f96e6ee1b06a972c0bb247d1dd3cd.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
526b3f0974a4b191dd7114d56ac640c4658f96e6ee1b06a972c0bb247d1dd3cd.exe
Resource
win10v2004-20230221-en
General
-
Target
526b3f0974a4b191dd7114d56ac640c4658f96e6ee1b06a972c0bb247d1dd3cd
-
Size
668KB
-
MD5
c068c13434c442bfa1e763b7fec9a58e
-
SHA1
1f12e8c75ce9fd32b7b46234c4143459c461aa9e
-
SHA256
526b3f0974a4b191dd7114d56ac640c4658f96e6ee1b06a972c0bb247d1dd3cd
-
SHA512
d264c8001697d0bb9bed0ddd97a58188c1a4ff04761f667579e05643034070924581e01679a19f1c03adcbde1f5ed0bc0ee25963960bfe364dd59461910af001
-
SSDEEP
12288:IKt7z5GoJiGaq5aurHlOh4nA84mckFKqDi0vg+7IGbpTgAmpE/2+NLjXB28V68Y:p5GoR5aClA8rFKq9CLpz87l68
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 526b3f0974a4b191dd7114d56ac640c4658f96e6ee1b06a972c0bb247d1dd3cd
Files
-
526b3f0974a4b191dd7114d56ac640c4658f96e6ee1b06a972c0bb247d1dd3cd.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 666KB - Virtual size: 665KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ