Static task
static1
Behavioral task
behavioral1
Sample
0446595d6efe2f4caa32934f5b3c166d03e92f50f13500ff2a2548d694e23d75.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0446595d6efe2f4caa32934f5b3c166d03e92f50f13500ff2a2548d694e23d75.exe
Resource
win10v2004-20230915-en
General
-
Target
0446595d6efe2f4caa32934f5b3c166d03e92f50f13500ff2a2548d694e23d75
-
Size
113KB
-
MD5
304fa1fa8ce3f5f1be03090621e78300
-
SHA1
03df131ee02d7352e1df4a17b9fe767fcfdf913a
-
SHA256
0446595d6efe2f4caa32934f5b3c166d03e92f50f13500ff2a2548d694e23d75
-
SHA512
cc6cf1752822545edb08c6244e83016b35d93b87395fc6f7489b031f868f00f8648c2080a1cf8a2137ad0b428ea508578fb5695cc6dd24e7b88ab7c7a46f0595
-
SSDEEP
1536:siinKRUU2csfW542ZRVy/sJ1GYrciTwnQOG4NSguze0DzzzzzzzzzzzGK/Dzzzze:siDRUU2Ji/ZdJ1Zt0nQFzf2S2g2v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0446595d6efe2f4caa32934f5b3c166d03e92f50f13500ff2a2548d694e23d75
Files
-
0446595d6efe2f4caa32934f5b3c166d03e92f50f13500ff2a2548d694e23d75.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ