Static task
static1
Behavioral task
behavioral1
Sample
Malicious_a9a79ff2997862871a282ceb2a88014704a67fac6c6404a9b57af917639475f5.dll
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
Malicious_a9a79ff2997862871a282ceb2a88014704a67fac6c6404a9b57af917639475f5.dll
Resource
win10v2004-20230621-en
General
-
Target
Malicious_a9a79ff2997862871a282ceb2a88014704a67fac6c6404a9b57af917639475f5.exe
-
Size
103KB
-
MD5
141b1806ad14613b85776d8799020297
-
SHA1
fbc5708bac9b83babda4a2d7fd013f0e65388636
-
SHA256
a9a79ff2997862871a282ceb2a88014704a67fac6c6404a9b57af917639475f5
-
SHA512
27ac4da85fa4229781ad78ed7f2df9f7f5f2908e5b9f493a48ac1ca8ab36bf24e6a07898122a624a1bd0a70da2e1b99a508a4c6f387dd040b8b1c6c12ba17097
-
SSDEEP
3072:LA3oyxRtnIzYGj6P6DXSJMT+8zMfU4Fm1MyWmriRRT:k3outn/O+R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Malicious_a9a79ff2997862871a282ceb2a88014704a67fac6c6404a9b57af917639475f5.exe
Files
-
Malicious_a9a79ff2997862871a282ceb2a88014704a67fac6c6404a9b57af917639475f5.exe.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ