Static task
static1
Behavioral task
behavioral1
Sample
rffA4q7W845OLroa.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
rffA4q7W845OLroa.exe
Resource
win10v2004-20230703-en
General
-
Target
rffA4q7W845OLroa.exe
-
Size
638KB
-
MD5
98609373390936c6bafa41a5ae8607d5
-
SHA1
36898ddfdeaba752134e7cbc9a64e4b71658a534
-
SHA256
12399c230f71bc6374bfc5ed7db16660bd1487d912983d67deadd91f4ec028d6
-
SHA512
e8e790f4f6728045359a10405fa8839aa92948746cf7105de7fc7fb655af5b934f6a246683022a6b77cecaad9e96dcde5b3c5b8af627541f551c12d5bde39932
-
SSDEEP
12288:3NmHFFDt7qLz1ehMIh+guYgdw8no6sniaVx9N43UY9SJC2qP:9mXxU1ehMIh+g2meo68iaH9NEz9gCr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource rffA4q7W845OLroa.exe
Files
-
rffA4q7W845OLroa.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 631KB - Virtual size: 631KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ