Static task
static1
Behavioral task
behavioral1
Sample
8148a2258b085d80073b3ccab2e36a0e1a351fe808dc16bf49ab300cdde56045.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
8148a2258b085d80073b3ccab2e36a0e1a351fe808dc16bf49ab300cdde56045.exe
Resource
win10v2004-20230703-en
General
-
Target
8148a2258b085d80073b3ccab2e36a0e1a351fe808dc16bf49ab300cdde56045
-
Size
6.5MB
-
MD5
ffe83d164474fb37d29d4a1c047c53c3
-
SHA1
a2c60ea3891f27c5a15bcf838f37dde6e9771cb2
-
SHA256
8148a2258b085d80073b3ccab2e36a0e1a351fe808dc16bf49ab300cdde56045
-
SHA512
e0c807db6dc61c572af268f6c13fed5fbb3849aa5bcebad3e696f08ba89f9c8a8c1f22628b94f07a9351e2a69214e75a4f3652b759bfc6ab845585146d39fc86
-
SSDEEP
49152:RD3WBvQgUug4fcUolm2AkMK5fA6x2SJR+KbH5Z9DcfubrWhwiOFEWdhAX6fUTEci:RDm95s9DcfuHWcmW3Aqf7SzimZkOn8d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8148a2258b085d80073b3ccab2e36a0e1a351fe808dc16bf49ab300cdde56045
Files
-
8148a2258b085d80073b3ccab2e36a0e1a351fe808dc16bf49ab300cdde56045.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6.4MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ