Static task
static1
Behavioral task
behavioral1
Sample
d86704134f65f0ebe87032f76864db5a.exe
Resource
win7-20230220-en
General
-
Target
d86704134f65f0ebe87032f76864db5a.exe
-
Size
4.0MB
-
MD5
d86704134f65f0ebe87032f76864db5a
-
SHA1
4189ddc83b8a369cf73dc3632cb8ed28bfb79eeb
-
SHA256
9e57ccd47600e2e5483b7464549bad124f2f529f09ad29a570f4e583a3355968
-
SHA512
db20eb1197e9f81d1dc5a378033dc116547d5a9444ee8679733e3513b7ba60da012550a2b40ce5124145eaaf5077fee169a1eedc19fff388af72dd6e336a94e0
-
SSDEEP
98304:XJs06Eg5LkheKEdyvea5ZUt9WnZQ+1yzmp8PN:XJq5cdQXCYSpS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d86704134f65f0ebe87032f76864db5a.exe
Files
-
d86704134f65f0ebe87032f76864db5a.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ