Static task
static1
Behavioral task
behavioral1
Sample
a79851d1a8e260659401e1d0c75294ae02d315a822ae17dc7f980eead73690c1.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
a79851d1a8e260659401e1d0c75294ae02d315a822ae17dc7f980eead73690c1.exe
Resource
win10v2004-20231020-en
General
-
Target
a79851d1a8e260659401e1d0c75294ae02d315a822ae17dc7f980eead73690c1
-
Size
610KB
-
MD5
88027f23fa5f7244462e5a3fe5b58229
-
SHA1
5c743e73221ef5cf59da5fa8b334fc00561f30d9
-
SHA256
a79851d1a8e260659401e1d0c75294ae02d315a822ae17dc7f980eead73690c1
-
SHA512
f5ac8891de258a8c105ff5fd6664657828c60bc2a386bf1593c2ffb3a3c1e7dff5039e67744fb21aad51e155a98d3dd2e0b2183cf49cb129e9cf4c577be9a4b8
-
SSDEEP
12288:A0VxgV801yQROFjCu3IGcDl6YG8zH4b7nr6FvobjJpTEifxRK2xU61y:Ar8IyQ8FW4I/RZB07VbVpT15RBU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a79851d1a8e260659401e1d0c75294ae02d315a822ae17dc7f980eead73690c1
Files
-
a79851d1a8e260659401e1d0c75294ae02d315a822ae17dc7f980eead73690c1.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 608KB - Virtual size: 607KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ