Static task
static1
Behavioral task
behavioral1
Sample
e74d17c67ccb9599412d3bfdaa129d27813d3ffeb542b2aee4f649e08fca19e7.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
e74d17c67ccb9599412d3bfdaa129d27813d3ffeb542b2aee4f649e08fca19e7.exe
Resource
win10v2004-20230703-en
General
-
Target
e74d17c67ccb9599412d3bfdaa129d27813d3ffeb542b2aee4f649e08fca19e7.exe
-
Size
815KB
-
MD5
0d886676db2b71d69028999203ee931e
-
SHA1
b6f8d6484d7324e879a27ba8df595629ade379bf
-
SHA256
e74d17c67ccb9599412d3bfdaa129d27813d3ffeb542b2aee4f649e08fca19e7
-
SHA512
b3a9b4f648008d29a7f27a43cdf819e05ede44d8038eff8b357c59776497f1ab991980bced76949b9245611707dae416cf20e3299e90eeb9abe876cee3b7fac4
-
SSDEEP
12288:axe2knCCtliiektp9+NsorTWJwCKH+3NYBiX0qmg+/2gsoshyIG7Ob5T/g0HSa:z7nZtoivb+NvrTWKeThyIiO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e74d17c67ccb9599412d3bfdaa129d27813d3ffeb542b2aee4f649e08fca19e7.exe
Files
-
e74d17c67ccb9599412d3bfdaa129d27813d3ffeb542b2aee4f649e08fca19e7.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 812KB - Virtual size: 812KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ