Static task
static1
Behavioral task
behavioral1
Sample
d61440747490d4b403f4436639207f3a665dca0cd035267ae044ceff6a0c80e9.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
d61440747490d4b403f4436639207f3a665dca0cd035267ae044ceff6a0c80e9.exe
Resource
win10v2004-20231020-en
General
-
Target
d61440747490d4b403f4436639207f3a665dca0cd035267ae044ceff6a0c80e9
-
Size
840KB
-
MD5
4db746e9683f9da42e5957bad9afcf37
-
SHA1
f1ca17e1bd7f5ca6eea517ab364f009c036e07a8
-
SHA256
d61440747490d4b403f4436639207f3a665dca0cd035267ae044ceff6a0c80e9
-
SHA512
db961979e8377d7b88b111553363dc32a1e557bdd60b3d502250c80c48edd68d3bd9c1a548ca10cffd72b2f65dad867d0c3b616a0df5c52643d5169f9afe0471
-
SSDEEP
6144:zsL+2uDWSccQH58LFWA+Ugf8jn11ryDHy8VUo744L0bzNlzwl92GhN:zGncG5q+b4eDS8VUo744QbHo2iN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d61440747490d4b403f4436639207f3a665dca0cd035267ae044ceff6a0c80e9
Files
-
d61440747490d4b403f4436639207f3a665dca0cd035267ae044ceff6a0c80e9.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 837KB - Virtual size: 837KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ