Static task
static1
Behavioral task
behavioral1
Sample
ffcf71feb80835d7f9bbe723135b86226cadc8236ecb5261697c4736516ed3ef.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
ffcf71feb80835d7f9bbe723135b86226cadc8236ecb5261697c4736516ed3ef.exe
Resource
win10v2004-20231023-en
General
-
Target
ffcf71feb80835d7f9bbe723135b86226cadc8236ecb5261697c4736516ed3ef
-
Size
1.2MB
-
MD5
844a714dab1efef1fe0a7a2c0c9dfa7e
-
SHA1
6b6afa6da338320ee9b27029d4cb263440409e61
-
SHA256
ffcf71feb80835d7f9bbe723135b86226cadc8236ecb5261697c4736516ed3ef
-
SHA512
5e5d21181f1c1157c9dbdbc67ca55872ac64cae5eb7c0fcb6b6a4e34ddb6f1a051bd1c3094e6245143e50933bc891d6ec3469c660c9a222d6dae4760313ecd0b
-
SSDEEP
24576:yCujajrecWrgooKJiUeWMq+HqTOE7klI8gZKyjJ:yObKJQWMs7klI8gZL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffcf71feb80835d7f9bbe723135b86226cadc8236ecb5261697c4736516ed3ef
Files
-
ffcf71feb80835d7f9bbe723135b86226cadc8236ecb5261697c4736516ed3ef.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ