Static task
static1
Behavioral task
behavioral1
Sample
5fe3691051b15363c0cb99225680eadf139d815a078bb8e35d6acdfa59992104.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
5fe3691051b15363c0cb99225680eadf139d815a078bb8e35d6acdfa59992104.exe
Resource
win10v2004-20231127-en
General
-
Target
5fe3691051b15363c0cb99225680eadf139d815a078bb8e35d6acdfa59992104
-
Size
343KB
-
MD5
175320e35a91aa8415e3b08ea6e5bdc6
-
SHA1
1639248526ceef472194ba43252741cfb1e4698f
-
SHA256
5fe3691051b15363c0cb99225680eadf139d815a078bb8e35d6acdfa59992104
-
SHA512
fce970be9c4ec7779e153ff9a1803d8b673e5ba6440999c74e7e4a562e37ef69e40a4a751c300c0dcfaac4ea11d29edb6ef2d4d527d17c005c152fdd3bb7a03a
-
SSDEEP
6144:M+NN8s91BMtFaG81g5qJRn4xxL2l6IKH+uFP4VYQXXepDzMYgA5YuvsuFie:fL1BoFaG81S0Rn4xtB9Q2QXMMcZvwe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 5fe3691051b15363c0cb99225680eadf139d815a078bb8e35d6acdfa59992104
Files
-
5fe3691051b15363c0cb99225680eadf139d815a078bb8e35d6acdfa59992104.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 341KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ