Static task
static1
Behavioral task
behavioral1
Sample
ec57fcf5d329d669b4381afbc9069d2ce25d0d3c2f9b50a3c50325d01814a9a2.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ec57fcf5d329d669b4381afbc9069d2ce25d0d3c2f9b50a3c50325d01814a9a2.exe
Resource
win10v2004-20230703-en
General
-
Target
ec57fcf5d329d669b4381afbc9069d2ce25d0d3c2f9b50a3c50325d01814a9a2
-
Size
806KB
-
MD5
4bc23491ce69cd9f5d0674f03af1415b
-
SHA1
3f834c344fcda07ed382ceceae989a4aaf7f673a
-
SHA256
ec57fcf5d329d669b4381afbc9069d2ce25d0d3c2f9b50a3c50325d01814a9a2
-
SHA512
50687ec36363ca0653a4c012182e28cda509eb950dfc6efa9714cb76195d83d1555afb0afefe404198db9c1fa2382ae28b9fd2c6631453c3cf2d8ada1dcd5bfe
-
SSDEEP
12288:HZLeaodDa37dEFVxMYJpuyFbm+8K3zyE3k/qcorAX/R7EfRuqV7jhtNIm9gWi6yZ:HQaoTcWfoqLBL0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec57fcf5d329d669b4381afbc9069d2ce25d0d3c2f9b50a3c50325d01814a9a2
Files
-
ec57fcf5d329d669b4381afbc9069d2ce25d0d3c2f9b50a3c50325d01814a9a2.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 803KB - Virtual size: 803KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ