Static task
static1
Behavioral task
behavioral1
Sample
CoLYHfsA7mnOFfW.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
CoLYHfsA7mnOFfW.exe
Resource
win10v2004-20231130-en
General
-
Target
a1045bc7406e2f0cb992d569501278bef67b6e644185b7662de59fafe1b9c377
-
Size
609KB
-
MD5
d756e293c97b13c064ec35d1d5f6c074
-
SHA1
52dda6a5bbcdcb8f531ad17f7c00418b634bcf04
-
SHA256
a1045bc7406e2f0cb992d569501278bef67b6e644185b7662de59fafe1b9c377
-
SHA512
ebb76e610774c7f47bbd600749037793d7735d0aa99989e50959fc1bb986d969c93e4ac4ac78157f8a95aac1f8e3f1c84fdcf56f5e114daae390a9d9d3b61ef0
-
SSDEEP
12288:arvD0V15ImM9D4kGiskPTGlNBu3c5IfpxP1qiSf4rWrRi2NxmJRXEUEf3UfZj+R:aLgVLFM9lYuGlDu3cef7Ajwa9/UbbEfr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/CoLYHfsA7mnOFfW.exe
Files
-
a1045bc7406e2f0cb992d569501278bef67b6e644185b7662de59fafe1b9c377.rar
-
CoLYHfsA7mnOFfW.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 645KB - Virtual size: 645KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ