Static task
static1
Behavioral task
behavioral1
Sample
67428cbd0c671871e8f08a167692327c3ab9b1c07910d2d8203158402094e7e8.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
67428cbd0c671871e8f08a167692327c3ab9b1c07910d2d8203158402094e7e8.exe
Resource
win10v2004-20230824-en
General
-
Target
67428cbd0c671871e8f08a167692327c3ab9b1c07910d2d8203158402094e7e8
-
Size
709KB
-
MD5
afa444e3025b685fda2b77d32fe90b47
-
SHA1
948ea7213c0faa2e4c52149a1bcaa25ff7013fbd
-
SHA256
67428cbd0c671871e8f08a167692327c3ab9b1c07910d2d8203158402094e7e8
-
SHA512
77577ddc670b9da71a007bd3601ba15467100e9db40fe568dd3c50d0f143576268ccf032f834d797e7c1140e2f4a77b6963732dea12f88760a5725bcb0ab76e5
-
SSDEEP
6144:UKPSCFPdB5MTocgUoZQYmYcZt+PNu2bhWJKZx4+lxg4CDZKhfRXGSt5lQHi+8cYp:0DP2h5cDZKhsSLlF+8n93P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67428cbd0c671871e8f08a167692327c3ab9b1c07910d2d8203158402094e7e8
Files
-
67428cbd0c671871e8f08a167692327c3ab9b1c07910d2d8203158402094e7e8.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 694KB - Virtual size: 693KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ