Static task
static1
Behavioral task
behavioral1
Sample
42fecf814325eb9c8a4459330f37b54e3b8a4260911d8c5596728f0c25fb0c87.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
42fecf814325eb9c8a4459330f37b54e3b8a4260911d8c5596728f0c25fb0c87.exe
Resource
win10v2004-20231023-en
General
-
Target
42fecf814325eb9c8a4459330f37b54e3b8a4260911d8c5596728f0c25fb0c87
-
Size
172KB
-
MD5
72785dfafd8e70befdd7a9eeca573d83
-
SHA1
06678dfefe4de073218b53452a4687b6acd79f19
-
SHA256
42fecf814325eb9c8a4459330f37b54e3b8a4260911d8c5596728f0c25fb0c87
-
SHA512
69cfd699be1115884066a7a24a671d05fedc21b24d29b98d72d1beb1eb28ccddb913940f8c5244ead37cab99b2c57da99ffe89d3057a17dd5b336000357e71a6
-
SSDEEP
1536:PAGzFa9J6CnCDWVYRHi7bXtuwb9zgELwb9zgEfwb9zgE3u/LYV+XB/iBqvO4Zwpl:+HtWUXu/vF0q2IrCgAdFZFUGqRIm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42fecf814325eb9c8a4459330f37b54e3b8a4260911d8c5596728f0c25fb0c87
Files
-
42fecf814325eb9c8a4459330f37b54e3b8a4260911d8c5596728f0c25fb0c87.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ