Static task
static1
Behavioral task
behavioral1
Sample
mx5YxLHScoqMImo.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
mx5YxLHScoqMImo.exe
Resource
win10v2004-20231127-en
General
-
Target
mx5YxLHScoqMImo.exe
-
Size
1.9MB
-
MD5
4e4c867be87859bce4c0ca42afed00d8
-
SHA1
186ccbb0eb39426dc0439c7dd388930dec0ebf2f
-
SHA256
d9426f66ba3dbff178904ff41cbddf65618a0b7b776b460c5b4af3f3f78ab970
-
SHA512
39ca9e1845f4958370999fa28f635637b0ffe0b25ab047a6921245037de2dcd0e2313e3bd7f21b9cff8c28209737e43dd50b4a47618f81de812da8d2667a7610
-
SSDEEP
49152:nGpbwGhL9CgTtXcF8cpaR9MM2Tx2v8ZqgpKVad+WjGAmUjgwRl:nGpbwGpZTJc2cpW9Mjx2vGqgpz+WjGAj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource mx5YxLHScoqMImo.exe
Files
-
mx5YxLHScoqMImo.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ