Static task
static1
Behavioral task
behavioral1
Sample
96ff24193035a8f8b7f7baef60d41cc3cfdb63bb6fbdcc4140eb5cf03dbd8cfa.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
96ff24193035a8f8b7f7baef60d41cc3cfdb63bb6fbdcc4140eb5cf03dbd8cfa.exe
Resource
win10v2004-20231023-en
General
-
Target
96ff24193035a8f8b7f7baef60d41cc3cfdb63bb6fbdcc4140eb5cf03dbd8cfa
-
Size
577KB
-
MD5
75b73fb5a701ef4b60ee61aa5cc4e46e
-
SHA1
02721709a3c8f5e62a987c248b91a9c2f42f95a4
-
SHA256
96ff24193035a8f8b7f7baef60d41cc3cfdb63bb6fbdcc4140eb5cf03dbd8cfa
-
SHA512
1ab200313d7138a501b4360b4dd9c9226050410676aea8b457b39a708c09ea3feb14fdbd6bb919076931de1d2e798c6d554dd1e2f4a4402ebedd1a0e6c2456c8
-
SSDEEP
12288:LfCFyewwDJSAC8UbeBzwRWNPfu+xy3jCIY1+pDcdJ3RYcVdr+OnfackZlNa/hU2V:LfCFyewwDJSkBzwRWNPfu+xy3jCIY1+o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96ff24193035a8f8b7f7baef60d41cc3cfdb63bb6fbdcc4140eb5cf03dbd8cfa
Files
-
96ff24193035a8f8b7f7baef60d41cc3cfdb63bb6fbdcc4140eb5cf03dbd8cfa.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 574KB - Virtual size: 574KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ