Static task
static1
Behavioral task
behavioral1
Sample
d8cdbf5061e1e3320937a369028b20e4b44a7b3cef2b93f989ebbb62cd01583b.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d8cdbf5061e1e3320937a369028b20e4b44a7b3cef2b93f989ebbb62cd01583b.exe
Resource
win10v2004-20230915-en
General
-
Target
d8cdbf5061e1e3320937a369028b20e4b44a7b3cef2b93f989ebbb62cd01583b
-
Size
717KB
-
MD5
cebb774777714051bb91c44ae17652ae
-
SHA1
b74ff63059b38268146108764a0f275fc08db34a
-
SHA256
d8cdbf5061e1e3320937a369028b20e4b44a7b3cef2b93f989ebbb62cd01583b
-
SHA512
86d9c2f46e3f4b6b4b4a02d19e8b2717c2719b0b7b786f18fe07fb32eb9dd6ccbf981bb20473e67167e5111a8fb5281a4526eaf129583e4ab73e72deba37b141
-
SSDEEP
6144:yeXj+ASJx97uopLXcmHHj0h0hu2bhtJKZ/qfDK4+lxg4C1VZKhfRXGSt5lTIwoH1:A7hdQ2vf+5c1VZKhsSLlTIXHaqtL9XD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d8cdbf5061e1e3320937a369028b20e4b44a7b3cef2b93f989ebbb62cd01583b
Files
-
d8cdbf5061e1e3320937a369028b20e4b44a7b3cef2b93f989ebbb62cd01583b.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 702KB - Virtual size: 702KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ