Static task
static1
Behavioral task
behavioral1
Sample
a89da79468e7095fd.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
a89da79468e7095fd.exe
Resource
win10v2004-20231020-en
General
-
Target
a89da79468e7095fd.exe
-
Size
733KB
-
MD5
74f95dedd7201e0002f18308dc9de279
-
SHA1
71c9d9138f75f00b04f70d1b203f1a4f6b1300ad
-
SHA256
1f57e150f51efa6cb3ad2be3aa0291aed7ea58a2f5ef48055eaf6c8b4ffe76c1
-
SHA512
6cd1213efd478bdbe842cc5c601cc9bfb674efbfef074992a2889d00865c66fea97adc7370c6f52cea383fc61f2d19d4f1eae4afa6f96563c18c95450c4a35dc
-
SSDEEP
12288:xdvu5JeQd0ubS6TtKoOfiC91iLXlg+O6yCNI7UKaEFEXdZI7I:/ueC9RtKoVi1ib2cNI7KXLI0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a89da79468e7095fd.exe
Files
-
a89da79468e7095fd.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 712KB - Virtual size: 711KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ