Static task
static1
Behavioral task
behavioral1
Sample
ef9997dc0f82da72b3224fb1e3859ec6.exe
Resource
win10-20231020-en
Behavioral task
behavioral2
Sample
ef9997dc0f82da72b3224fb1e3859ec6.exe
Resource
win10v2004-20231023-en
General
-
Target
ef9997dc0f82da72b3224fb1e3859ec6.exe
-
Size
757KB
-
MD5
ef9997dc0f82da72b3224fb1e3859ec6
-
SHA1
d52a6edaa52164d8e8b5d712fbf46729a9d57613
-
SHA256
d1164fe7652f2c5c800f0227383ebbd77157e84ff84d6713e4a8ea3ff7d47f86
-
SHA512
a0ba0026f20123ae8af803beab9da5fa46a886d3f07e6f74796c1587385993f509555ae451964494a035995528b7407e5c540ac03394e3499ac7a9b1dc2bf967
-
SSDEEP
12288:2pW5DIaIftlexM1+meMfmBr9J4Hlim12e3d1l99NHfQXDnzr1LVI5fd2BT:2k50a0T1+JMMxJ4HlHc+1l9zHfMVIDOT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef9997dc0f82da72b3224fb1e3859ec6.exe
Files
-
ef9997dc0f82da72b3224fb1e3859ec6.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 755KB - Virtual size: 754KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ