Static task
static1
Behavioral task
behavioral1
Sample
481a5f2f40a3bd543ee6084c148e5713080a7d835a20ed22ef6f8b02cf10ff6c.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
481a5f2f40a3bd543ee6084c148e5713080a7d835a20ed22ef6f8b02cf10ff6c.exe
Resource
win10v2004-20231023-en
General
-
Target
481a5f2f40a3bd543ee6084c148e5713080a7d835a20ed22ef6f8b02cf10ff6c
-
Size
690KB
-
MD5
f79b95608c944a2b41276afdfc501e87
-
SHA1
d61f55f920e26b17f5974345eaf693637b045f1f
-
SHA256
481a5f2f40a3bd543ee6084c148e5713080a7d835a20ed22ef6f8b02cf10ff6c
-
SHA512
671bfab8ea97d2a71fe8c2b34fbcb9fe6f5eae03667ff026045b496d0276036101bd23234db4f47c57781da99cbd3808cc083d9345625ef9fe60f93c02d5670b
-
SSDEEP
12288:v7/oLXGkJlBf3cr6saDVz49YilDUDiIEjzV78wWZwhr4yP2Bj1T:w2k7Bf3R1DVzEFD7dfPh3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 481a5f2f40a3bd543ee6084c148e5713080a7d835a20ed22ef6f8b02cf10ff6c
Files
-
481a5f2f40a3bd543ee6084c148e5713080a7d835a20ed22ef6f8b02cf10ff6c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 678KB - Virtual size: 677KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ