Static task
static1
Behavioral task
behavioral1
Sample
Malicious_398266a59d8a3205adfab32702c5ad2a606a9f20824388355f8c978e8cab7084.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
Malicious_398266a59d8a3205adfab32702c5ad2a606a9f20824388355f8c978e8cab7084.exe
Resource
win10v2004-20230621-en
General
-
Target
Malicious_398266a59d8a3205adfab32702c5ad2a606a9f20824388355f8c978e8cab7084.exe
-
Size
54KB
-
MD5
ccf14f8aa61fdd72bcb67dff31f928c6
-
SHA1
44dbd898de2b3bca05746db327b5f1fe760036cd
-
SHA256
398266a59d8a3205adfab32702c5ad2a606a9f20824388355f8c978e8cab7084
-
SHA512
313c952caccb2a5de20a91a6fe3487b173c003ada7b80cf3fc5f38abe4e2320a22f6ee4921635212c9672c0bef81888ade36f51367642f02112e8cabad856b87
-
SSDEEP
768:6sJeYa1kMRJKBBd75B46H76nQCe3S0fIrdXkQHss+FwH2QajTAJWLMJmAufsLnWN:9eYaSNBdz4ZQD3rOd067moFPI1f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Malicious_398266a59d8a3205adfab32702c5ad2a606a9f20824388355f8c978e8cab7084.exe
Files
-
Malicious_398266a59d8a3205adfab32702c5ad2a606a9f20824388355f8c978e8cab7084.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
!e%%1e Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ