Static task
static1
Behavioral task
behavioral1
Sample
4699f7c362713964fab8d900f51fee6557dee3f6f17435076bc781e3b787aa12.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
4699f7c362713964fab8d900f51fee6557dee3f6f17435076bc781e3b787aa12.exe
Resource
win10v2004-20231020-en
General
-
Target
4699f7c362713964fab8d900f51fee6557dee3f6f17435076bc781e3b787aa12
-
Size
623KB
-
MD5
51e8f75df3438300b0c136a98a2e92e1
-
SHA1
4c6e23939af835dc9c69ee162e5f63188b84d127
-
SHA256
4699f7c362713964fab8d900f51fee6557dee3f6f17435076bc781e3b787aa12
-
SHA512
72793b0bf3eed2ef039744cc6b5c46289efed3059dce707e5dacec2f3e490ff716cf05c2ecf999c042ca8d53ed5a5760ecff86a419fa94fc61100d6ffa497064
-
SSDEEP
12288:zcsCxiBNy7o1tiPHtMCyOrxruC0GlW7E74NZ1NfP8mDcfqo1OUij:zcsdyc1cP2CF5Qw4D1OmDcfli
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4699f7c362713964fab8d900f51fee6557dee3f6f17435076bc781e3b787aa12
Files
-
4699f7c362713964fab8d900f51fee6557dee3f6f17435076bc781e3b787aa12.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 598KB - Virtual size: 598KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ