Static task
static1
Behavioral task
behavioral1
Sample
d20bd94a26215c6772895ac7d32394c0_console.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d20bd94a26215c6772895ac7d32394c0_console.exe
Resource
win10v2004-20230915-en
General
-
Target
d20bd94a26215c6772895ac7d32394c0_console.exe
-
Size
353KB
-
MD5
d20bd94a26215c6772895ac7d32394c0
-
SHA1
718d41a9198115f36db50fe7de30df8280e3dde2
-
SHA256
7046def2741aeae0757b8bc9b61a770eb1983a0b53978c7dca1437a584bc40eb
-
SHA512
0adf2970b9e56d04452bd7b95614ce586aa4534af4b163a4d1d9394c2d7518666851e4543d89966042ef12880685b125f2a20927dbc27887cfa5d01d1914def7
-
SSDEEP
6144:bX+mZevMH7Wbv2hrWbzYjweTQ9VFPSo7aYqUb7E4KP3VK:6mFQ+5Q7FmYqUSPlK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d20bd94a26215c6772895ac7d32394c0_console.exe
Files
-
d20bd94a26215c6772895ac7d32394c0_console.exe.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 351KB - Virtual size: 350KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ