Static task
static1
Behavioral task
behavioral1
Sample
a2d0dd1cb89611c7e979d65a73d51a573de55fb14f1130f28196618a828932c5.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
a2d0dd1cb89611c7e979d65a73d51a573de55fb14f1130f28196618a828932c5.exe
Resource
win10v2004-20231023-en
General
-
Target
a2d0dd1cb89611c7e979d65a73d51a573de55fb14f1130f28196618a828932c5
-
Size
1.8MB
-
MD5
d2f35a6f207bc1d197a8f43c2d31d8ff
-
SHA1
4645a201aeaa2e3ebed2681908d7a459ec72d8b0
-
SHA256
a2d0dd1cb89611c7e979d65a73d51a573de55fb14f1130f28196618a828932c5
-
SHA512
6a648b3cda34f6e62505828456b8f74a9073b40aebfa2965ae7fe36717969a8444ea4c94a9c4ec498a655be6d41d0bb2c2bbcf9a246813fe3f995de4d6775ffd
-
SSDEEP
24576:XqgLbQGiEwAUnxA7H0slfGJpmd4qEvLtbQgxaO/VXuLOpfdIuA0Fre2M6QJ:XrbRwDC7AmsvnVXdQuA/7R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2d0dd1cb89611c7e979d65a73d51a573de55fb14f1130f28196618a828932c5
Files
-
a2d0dd1cb89611c7e979d65a73d51a573de55fb14f1130f28196618a828932c5.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ