Static task
static1
Behavioral task
behavioral1
Sample
0d52da048d4d402275d9aa70d8ca2a03af6e30401f041ff62c96a37457bf9d1f.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0d52da048d4d402275d9aa70d8ca2a03af6e30401f041ff62c96a37457bf9d1f.exe
Resource
win10v2004-20230703-en
General
-
Target
0d52da048d4d402275d9aa70d8ca2a03af6e30401f041ff62c96a37457bf9d1f
-
Size
22KB
-
MD5
e5ccf8648b65c18e545c6c46d8615247
-
SHA1
30d9cbe0794a991857f9b77b2341c90eb382d4a6
-
SHA256
0d52da048d4d402275d9aa70d8ca2a03af6e30401f041ff62c96a37457bf9d1f
-
SHA512
45ec8d6769f6e48b4aae6976be4cf51a8573229d019dc8ac6f24283a920bde104e0d928d28dfc000d6953841f13893606ee77715f3b95af827a923334fde9a85
-
SSDEEP
384:jC83gc+N1qjWkOhkvwKwq6uc5G8y8WyjIygl5G8y8WjjIsZWmGW:jC8QJ+Oh5P9jIll5PUjIM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d52da048d4d402275d9aa70d8ca2a03af6e30401f041ff62c96a37457bf9d1f
Files
-
0d52da048d4d402275d9aa70d8ca2a03af6e30401f041ff62c96a37457bf9d1f.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ