Static task
static1
Behavioral task
behavioral1
Sample
621f6868f64f8cc1e88546314ed8ca71b4a64d31b1a76118a0cd8a7b8649b701.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
621f6868f64f8cc1e88546314ed8ca71b4a64d31b1a76118a0cd8a7b8649b701.exe
Resource
win10-20231020-en
General
-
Target
621f6868f64f8cc1e88546314ed8ca71b4a64d31b1a76118a0cd8a7b8649b701
-
Size
800KB
-
MD5
f9e4ecf03afcdaea463f8091ac4b1690
-
SHA1
8b98e543353e3772d11f109388fcb2537e903564
-
SHA256
621f6868f64f8cc1e88546314ed8ca71b4a64d31b1a76118a0cd8a7b8649b701
-
SHA512
5cfb6a97244486fa70da5eaf2ea7b4055f39fe48b179df77c5aa72e243df474e7b780d473d29f69d7b2b655f0cf9527aac1c31926fe42f7684b45587a66fbbf0
-
SSDEEP
24576:yC9VmtaT5x8fSY4355/bEMsm27tE91cLQsDogd:y7ta1x8m//oMsm27tosDxd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 621f6868f64f8cc1e88546314ed8ca71b4a64d31b1a76118a0cd8a7b8649b701
Files
-
621f6868f64f8cc1e88546314ed8ca71b4a64d31b1a76118a0cd8a7b8649b701.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 796KB - Virtual size: 796KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ