Static task
static1
Behavioral task
behavioral1
Sample
1697173443391df00c7408a96b6f171c3665fb615c66daa3825087c6632b5d286d07b6b591233.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1697173443391df00c7408a96b6f171c3665fb615c66daa3825087c6632b5d286d07b6b591233.exe
Resource
win10v2004-20230915-en
General
-
Target
1697173443391df00c7408a96b6f171c3665fb615c66daa3825087c6632b5d286d07b6b591233.dat-decoded
-
Size
64KB
-
MD5
9b2dffb5747aea1e6ccc4d2a7055bcf6
-
SHA1
dcd11aecdcf33b57fbc5528ea8509b2f942df7e8
-
SHA256
9de0c90a9ad1a1d2e8050513205b6eddf17bd22105d40779367d6789e82c9c30
-
SHA512
26e4447a2f17069f850288e7b297010ec9caeccf72de971ab86fd81436a8c573ac69106b5d321597d0bf0c51b9618e54662917594f7c4b29e8e25d93412a8e2b
-
SSDEEP
1536:fBymRmBOBI6RBTXBbBuB5BeBNz4bO9JZk+GRcX1vgzU2AY:fBxRmBOBI6RBTXBbBuB5BeBNpFvx6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1697173443391df00c7408a96b6f171c3665fb615c66daa3825087c6632b5d286d07b6b591233.dat-decoded
Files
-
1697173443391df00c7408a96b6f171c3665fb615c66daa3825087c6632b5d286d07b6b591233.dat-decoded.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ