Static task
static1
Behavioral task
behavioral1
Sample
4cf7427cf3353b202d2540934b1ecf2601e423c964fbbaf958f87af0fda3e277.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4cf7427cf3353b202d2540934b1ecf2601e423c964fbbaf958f87af0fda3e277.exe
Resource
win10v2004-20230703-en
General
-
Target
4cf7427cf3353b202d2540934b1ecf2601e423c964fbbaf958f87af0fda3e277
-
Size
1.1MB
-
MD5
61a6c10eded8668bcf0641f3ce901314
-
SHA1
6074be53ee0088f873c4c7902721d2f299e89d7f
-
SHA256
4cf7427cf3353b202d2540934b1ecf2601e423c964fbbaf958f87af0fda3e277
-
SHA512
c0a432aed50d7be44442321da73492990691c4eb28fc4af04d16845a7e22718c56c226baff1b8ca6695f6952afc0d2bd6ced80d9609a7bc4c0f37d148177d0bd
-
SSDEEP
24576:duatJXbWflXrGfZ3YdOXta2oV4PjnH0oz/ptI+TluYtgK4:MsbGSx394wJzh1TluYb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cf7427cf3353b202d2540934b1ecf2601e423c964fbbaf958f87af0fda3e277
Files
-
4cf7427cf3353b202d2540934b1ecf2601e423c964fbbaf958f87af0fda3e277.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
f#4\IT Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ