Static task
static1
Behavioral task
behavioral1
Sample
878b1f99e9b84bfdf50601a6-7c42dcb58e254994aab3-cb022c513b7d6c3a417e3f2c558c2be9.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
878b1f99e9b84bfdf50601a6-7c42dcb58e254994aab3-cb022c513b7d6c3a417e3f2c558c2be9.exe
Resource
win10v2004-20230915-en
General
-
Target
878b1f99e9b84bfdf50601a6-7c42dcb58e254994aab3-cb022c513b7d6c3a417e3f2c558c2be9.exe
-
Size
738KB
-
MD5
8cc3437ae36d9ad0a370b247db07e4bb
-
SHA1
8e74ff302b327da6b20d4be583a6e99d6f79999f
-
SHA256
3ed9b28534b466a1716ee9e711e41c1c51fc5d7e2812684833a679d499d9ef4e
-
SHA512
e66a0039a8ee69ce7c062618e5a592323b01b2215d29ba2bd71dcbaf544603c0d81a855ae3580ad8942563848e86964a62a794c64f99cf82042a23cb0b9f274d
-
SSDEEP
12288:SzKLmE39+V07FTtemt3DaC0IRidwfLpbrTmtpdqEhXs0FW5AHA7433TTJCF85:SmP9Ku/3DaCyifLpbnmjdPnFW5AHC4Hp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 878b1f99e9b84bfdf50601a6-7c42dcb58e254994aab3-cb022c513b7d6c3a417e3f2c558c2be9.exe
Files
-
878b1f99e9b84bfdf50601a6-7c42dcb58e254994aab3-cb022c513b7d6c3a417e3f2c558c2be9.exe.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
SHA10 Size: - Virtual size: 412KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SHA10 Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SHA10 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SHA10 Size: 124KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SHA10 Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE