Static task
static1
Behavioral task
behavioral1
Sample
d9c3cf6bb249021affba53ddba47644065aee3f49488dac1e66758a6f731e063.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d9c3cf6bb249021affba53ddba47644065aee3f49488dac1e66758a6f731e063.exe
Resource
win10v2004-20230915-en
General
-
Target
d9c3cf6bb249021affba53ddba47644065aee3f49488dac1e66758a6f731e063
-
Size
1.1MB
-
MD5
0fa4e701f5343e93e5df08ef7f51c57f
-
SHA1
c3cfd507d65f9e2baadb99bb54098df81af6e714
-
SHA256
d9c3cf6bb249021affba53ddba47644065aee3f49488dac1e66758a6f731e063
-
SHA512
d5a9973acddfcd27d22b727767ac65f374c82bb6686638e43d77ac868e9cd4e8b7070539ee378b82f10256997d3b198e12732d1f2749e9edee195bc270b9834d
-
SSDEEP
12288:VL5CnB3lBZ4noPCwfUufsOrWYkqkOPuPP8OMhh/CHi+Z4+jBW59mthvf6i96hOn3:Vw2noYufsGkqyX8OQgJtjBuMttd2CRN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9c3cf6bb249021affba53ddba47644065aee3f49488dac1e66758a6f731e063
Files
-
d9c3cf6bb249021affba53ddba47644065aee3f49488dac1e66758a6f731e063.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ