Static task
static1
Behavioral task
behavioral1
Sample
5b7fff06560c607aa96cb59870b1a39e911f5dc52f2c6e720e6758c7855b89fb.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5b7fff06560c607aa96cb59870b1a39e911f5dc52f2c6e720e6758c7855b89fb.exe
Resource
win10v2004-20230703-en
General
-
Target
5b7fff06560c607aa96cb59870b1a39e911f5dc52f2c6e720e6758c7855b89fb
-
Size
10KB
-
MD5
e21c81a20456b07dd2f8c68d35b9e786
-
SHA1
06a926909b0adf4cde6f1c8f0006191b64bf66cf
-
SHA256
5b7fff06560c607aa96cb59870b1a39e911f5dc52f2c6e720e6758c7855b89fb
-
SHA512
4abd46d98f4df982f01a8eb8faa1c6b8cb1d0a167124b92083e7d5ee2be68d857ee4fb70adf956a0b6cc7e4a3cac0ec9d9ae8965bc92993b683941f51e4ed241
-
SSDEEP
192:0pqSE9KY8vyVxT/9P+bi9q0f6KS1UZb8Tfy3Agd:0US68vqwbmq0f6m4fDg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b7fff06560c607aa96cb59870b1a39e911f5dc52f2c6e720e6758c7855b89fb
Files
-
5b7fff06560c607aa96cb59870b1a39e911f5dc52f2c6e720e6758c7855b89fb.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ