Static task
static1
Behavioral task
behavioral1
Sample
4dcc1fc2ac6414de0d92db213bd95c03590601ffee4456dfc6ccdbb508329d9c.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
4dcc1fc2ac6414de0d92db213bd95c03590601ffee4456dfc6ccdbb508329d9c.exe
Resource
win10v2004-20231020-en
General
-
Target
4dcc1fc2ac6414de0d92db213bd95c03590601ffee4456dfc6ccdbb508329d9c
-
Size
659KB
-
MD5
be87f1e5144e9faaa0a05c41495fd2e5
-
SHA1
230b47912944a40c944d6fe2c5153d18d5258730
-
SHA256
4dcc1fc2ac6414de0d92db213bd95c03590601ffee4456dfc6ccdbb508329d9c
-
SHA512
0b6436012ec9b5137b565b380a3f4b003ef2206fcfdfab4d3c87650493b46466b1befaa1d87c9a584e527607f762c0a5858f3d9e388c07e12e4adb226b2d4367
-
SSDEEP
12288:leI82PGn4MoqzeuNNmMMqMjdclAci8vkFz+HUAx72XpdIlt+:leI3unCqzXWMMZybkFzvy7Syt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4dcc1fc2ac6414de0d92db213bd95c03590601ffee4456dfc6ccdbb508329d9c
Files
-
4dcc1fc2ac6414de0d92db213bd95c03590601ffee4456dfc6ccdbb508329d9c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 646KB - Virtual size: 646KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ