Static task
static1
Behavioral task
behavioral1
Sample
00de59b47743f85e326cdbe02d21392930a6ca7a3c697c5c0ab89fedf1a63159.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
00de59b47743f85e326cdbe02d21392930a6ca7a3c697c5c0ab89fedf1a63159.exe
Resource
win10v2004-20230915-en
General
-
Target
00de59b47743f85e326cdbe02d21392930a6ca7a3c697c5c0ab89fedf1a63159
-
Size
674KB
-
MD5
b932dee3c7fbc1987f841bb32e073d2d
-
SHA1
887358e6664ae88e9536b42b13019d0a94d89e22
-
SHA256
00de59b47743f85e326cdbe02d21392930a6ca7a3c697c5c0ab89fedf1a63159
-
SHA512
2ec17eb0e9842514f6017f91f96d1c045c59ad519b71cb3f7f060ff721342119ee041601af92a1dc776e8f98b93de9e7b7a9c1cce08f50b92df8e0973a93fb3a
-
SSDEEP
12288:ygo+gg4nKbCPCceCBDjX+VvfDKha7Ut5e/dkCnVj53XPDT:yogg4nKb8CmjXwO5e/dkQ3/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00de59b47743f85e326cdbe02d21392930a6ca7a3c697c5c0ab89fedf1a63159
Files
-
00de59b47743f85e326cdbe02d21392930a6ca7a3c697c5c0ab89fedf1a63159.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
nAj+ Size: 264KB - Virtual size: 263KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 394KB - Virtual size: 393KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ