Static task
static1
Behavioral task
behavioral1
Sample
b2040e0f74d86e127feb785e3e1e27c76d66790c795e9474f22165f416cf68b0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
b2040e0f74d86e127feb785e3e1e27c76d66790c795e9474f22165f416cf68b0.exe
Resource
win10v2004-20231023-en
General
-
Target
b2040e0f74d86e127feb785e3e1e27c76d66790c795e9474f22165f416cf68b0
-
Size
899KB
-
MD5
746ef2ef619328ae3b89d015e2eec7b7
-
SHA1
cc35cc203904d6fe3861d0296c73b323f9d394c7
-
SHA256
b2040e0f74d86e127feb785e3e1e27c76d66790c795e9474f22165f416cf68b0
-
SHA512
4bdc6e1cb7a2d458a8b77b3c6612102b81436027a21f801ec392faa7d12739d0b0340649ab43bb27a70dd84352ef11ff0a0bed3835bd31579a6d52db076bc51f
-
SSDEEP
12288:4q8og+2FYyxC91PjwobPqUULvdVZ16PEJWd6iJ7NtDM9wDilqP7r9r/+pppppppm:MfFYyu1P8cPuvnZEPEodPtA9u1qm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2040e0f74d86e127feb785e3e1e27c76d66790c795e9474f22165f416cf68b0
Files
-
b2040e0f74d86e127feb785e3e1e27c76d66790c795e9474f22165f416cf68b0.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 683KB - Virtual size: 682KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 215KB - Virtual size: 214KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ