Static task
static1
Behavioral task
behavioral1
Sample
0f5b1c3422501727cc27a55d331c8c61f21a67f7aa62abbc660f3dfdb9c5cbf7.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
0f5b1c3422501727cc27a55d331c8c61f21a67f7aa62abbc660f3dfdb9c5cbf7.exe
Resource
win10v2004-20231127-en
General
-
Target
0f5b1c3422501727cc27a55d331c8c61f21a67f7aa62abbc660f3dfdb9c5cbf7
-
Size
700KB
-
MD5
96b53c2dd72911e77e2b7748c766d1df
-
SHA1
28104ba964acdef5d6f1ff01a242a94be183d51e
-
SHA256
0f5b1c3422501727cc27a55d331c8c61f21a67f7aa62abbc660f3dfdb9c5cbf7
-
SHA512
698a8461d408b39b19b6f2548e34012112f0bb0279dcc5de9c071fded82cb61cacbb5369188b590aa5ce17f4926496a17f496afef0b2116b7aea6cad1f8167bb
-
SSDEEP
12288:u0tQaueH5qEm1N75YzqY2y0ZD1zW3MGC8izgdRDh3MvLc2zAgM2:u0LqJNlY2zV1MC8izMDh3MvLPsgM2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f5b1c3422501727cc27a55d331c8c61f21a67f7aa62abbc660f3dfdb9c5cbf7
Files
-
0f5b1c3422501727cc27a55d331c8c61f21a67f7aa62abbc660f3dfdb9c5cbf7.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 632KB - Virtual size: 631KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ