Static task
static1
Behavioral task
behavioral1
Sample
a1886f685166d4be80d54dfc12e8b369deb4384b249e6aa60e7f8c7d02816191.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
a1886f685166d4be80d54dfc12e8b369deb4384b249e6aa60e7f8c7d02816191.exe
Resource
win10v2004-20231023-en
General
-
Target
a1886f685166d4be80d54dfc12e8b369deb4384b249e6aa60e7f8c7d02816191
-
Size
9.9MB
-
MD5
4b893a61613e8510ca86f4a1b5d289b4
-
SHA1
9983e73a4b2433448e42b6feb0d04afeabeed99e
-
SHA256
a1886f685166d4be80d54dfc12e8b369deb4384b249e6aa60e7f8c7d02816191
-
SHA512
15e420eb86d4322a759a9503c286798956178699d1aba149241cde6ae2ea245511d2e7305120ecee1ad75185930194b194eb4300f796d63bbc9dd48895757aea
-
SSDEEP
196608:XqG6fth+H4TaduMID+AsrzwBiaBYJwQwvk5KTOYTa+tH/+MpZG:GFhgID+A9BiaBYJwQk8Z+YMpZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1886f685166d4be80d54dfc12e8b369deb4384b249e6aa60e7f8c7d02816191
Files
-
a1886f685166d4be80d54dfc12e8b369deb4384b249e6aa60e7f8c7d02816191.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 9.9MB - Virtual size: 9.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ