Static task
static1
Behavioral task
behavioral1
Sample
5d06a9f1cdd16e1a386a4a1cf5416fd4fa0f20783e4f46c9b5226b3ae0087739.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5d06a9f1cdd16e1a386a4a1cf5416fd4fa0f20783e4f46c9b5226b3ae0087739.exe
Resource
win10v2004-20230915-en
General
-
Target
5d06a9f1cdd16e1a386a4a1cf5416fd4fa0f20783e4f46c9b5226b3ae0087739
-
Size
489KB
-
MD5
e9fcfb2631168d2b1348db93d37ec70e
-
SHA1
2f3abb07cda8acc08625fffb3aa264a51f899f2c
-
SHA256
5d06a9f1cdd16e1a386a4a1cf5416fd4fa0f20783e4f46c9b5226b3ae0087739
-
SHA512
54dafd240dc6231e17d07bd4c631ba0f67690ca0e4ac9406e5777194664908c064a8977cf1184df997c32db261c752d862447c5aa85a61d894110501167558aa
-
SSDEEP
3072:zdQ8eKk3obaoYtzyP6GoAZRhnyy3fosobC9ayy3fosobC9k2yiqyy3fGsob9Z2:zda4b5Y06yi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d06a9f1cdd16e1a386a4a1cf5416fd4fa0f20783e4f46c9b5226b3ae0087739
Files
-
5d06a9f1cdd16e1a386a4a1cf5416fd4fa0f20783e4f46c9b5226b3ae0087739.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 389KB - Virtual size: 388KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ