Static task
static1
Behavioral task
behavioral1
Sample
1048b250551bdf8792a37386a8602412.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1048b250551bdf8792a37386a8602412.exe
Resource
win10v2004-20231215-en
General
-
Target
1048b250551bdf8792a37386a8602412
-
Size
4.2MB
-
MD5
1048b250551bdf8792a37386a8602412
-
SHA1
eed247062a60b5f5923bdde1ffe53b2012c6c14a
-
SHA256
5822cfa0c6124e553a1601b57d0828750faa026a883733f6ab5e3be58c3912df
-
SHA512
19b204440de75d746cf53cc608d2c52a6f9bcba171c4fec196dddeb977f92e40dc1f7ca1396f5969c4f1323e4249ebdf5cb1bf1b7b721edd61a6965b53b1b621
-
SSDEEP
98304:mhFtXB4uluJRmMg6QWlIpgi0rHqsih/mCqZB4ulu6:IvsJR0TW6yiIKRhzqts6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1048b250551bdf8792a37386a8602412
Files
-
1048b250551bdf8792a37386a8602412.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ