Static task
static1
Behavioral task
behavioral1
Sample
0b5e6426291d58736ab376dc2c581c438324bf737c9dd5ae650dca67bfeeef3e.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0b5e6426291d58736ab376dc2c581c438324bf737c9dd5ae650dca67bfeeef3e.exe
Resource
win10v2004-20230703-en
General
-
Target
0b5e6426291d58736ab376dc2c581c438324bf737c9dd5ae650dca67bfeeef3e
-
Size
5.2MB
-
MD5
df3b6c43e93b18820b487187aa09ecc3
-
SHA1
5e211e9168c8cab610d5b4397bb549227a8fec10
-
SHA256
0b5e6426291d58736ab376dc2c581c438324bf737c9dd5ae650dca67bfeeef3e
-
SHA512
786a1b51278aa455516cca04dc692c13f1103d3aab0ec91825c3f5237f057eefed34d6ce6d2f295acbc6aa3a107f7f9bb00babad6c390667aa9a11476f89619d
-
SSDEEP
98304:3puy5TxQSTkz5lYoGAugg3c98T4wUcb0K67TZi8dTORhIkVwukIV7L1sLPiLPL:3PUfBg3o8T4wU+ATU8dyRhIkVke7h8a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b5e6426291d58736ab376dc2c581c438324bf737c9dd5ae650dca67bfeeef3e
Files
-
0b5e6426291d58736ab376dc2c581c438324bf737c9dd5ae650dca67bfeeef3e.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5.2MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ