Static task
static1
Behavioral task
behavioral1
Sample
876-1057.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
876-1057.exe
Resource
win10v2004-20231023-en
General
-
Target
876-1057.exe
-
Size
675KB
-
MD5
0074fb71f5ebdbc29a96c9b2d2ef6fa9
-
SHA1
4f33f3b3c5891b2342fa8f83f881289c46044802
-
SHA256
b06fa82f10d2120f00f919b03f578f97a3daa9f670a2bbd01749e3b573fb0315
-
SHA512
7be2b97be32db7c78953e857166ab8cdd51d59416e67a47147d3c917f0c1a4930991568878cbfd426a4cb9ecba65a6845943816ee92c8c85964c0a329ca92f01
-
SSDEEP
12288:tUR6dhdoaQjwbUNG8raMGDdzPISYBlQCHspTRjq0j3xmZSSuXtXRfa9OB1Y:tUR6eW8Gv9P11q0TxmZSttXTfY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 876-1057.exe
Files
-
876-1057.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 541KB - Virtual size: 541KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ