Static task
static1
Behavioral task
behavioral1
Sample
2596ebc0efcdc61bcedda6f54707f35e388a98cf2233d2a95ad3741535ce5838.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
2596ebc0efcdc61bcedda6f54707f35e388a98cf2233d2a95ad3741535ce5838.exe
Resource
win10v2004-20231020-en
General
-
Target
2596ebc0efcdc61bcedda6f54707f35e388a98cf2233d2a95ad3741535ce5838
-
Size
634KB
-
MD5
07cb44d61fc4c9f2262a2f8ccefee7c5
-
SHA1
6a1ac5b6adbc9e7b8fe9c873c413b93555d78a16
-
SHA256
13b56cbdd7ca4fdb90c0f6ac42782fc37e042dc5b7585f5f9e146a5985b6cf2a
-
SHA512
a27d68152bc8a83f9f1a5885f887fcd3d8dea5093e938b0f1b92fbdb7f59210bbed94a26586025047c158fc5cb7826c5dcf1663a51765dd8d8fcf0b68f034cbb
-
SSDEEP
12288:bksGROUPIeq9LxfKuK2gf1T53LIMI0U9HKBmZFLLaCiIglyhHP:bksGwsIeqKuwf1T53LvU+m7idkxP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2596ebc0efcdc61bcedda6f54707f35e388a98cf2233d2a95ad3741535ce5838
Files
-
2596ebc0efcdc61bcedda6f54707f35e388a98cf2233d2a95ad3741535ce5838.zip
-
2596ebc0efcdc61bcedda6f54707f35e388a98cf2233d2a95ad3741535ce5838.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 709KB - Virtual size: 709KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ