Static task
static1
Behavioral task
behavioral1
Sample
160764e2f395ecd512ea174af36156ad0d2fbe3e3e78a63a90ff90307b22202a.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
160764e2f395ecd512ea174af36156ad0d2fbe3e3e78a63a90ff90307b22202a.exe
Resource
win10v2004-20230621-en
General
-
Target
160764e2f395ecd512ea174af36156ad0d2fbe3e3e78a63a90ff90307b22202a
-
Size
288KB
-
MD5
6ae917525435e23b07d15537fb40aea0
-
SHA1
7c85b447bb5608ba7fb6a332c033c0cdad0430ae
-
SHA256
160764e2f395ecd512ea174af36156ad0d2fbe3e3e78a63a90ff90307b22202a
-
SHA512
23e5f94e964d53d72af0d6ad31da309539116a9963806ce7b0d3c028a69ab343df6cd6f3989b280e70a285395425a1cb93492fe5030968558ada5f7de047aaed
-
SSDEEP
6144:Ft+WQdzUUPFTf2HHvKlHQho0jT21v3Ifz/x2ShelxPcWpv:61oqm+QbjTIwr/l00m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 160764e2f395ecd512ea174af36156ad0d2fbe3e3e78a63a90ff90307b22202a
Files
-
160764e2f395ecd512ea174af36156ad0d2fbe3e3e78a63a90ff90307b22202a.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 175KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ