Static task
static1
Behavioral task
behavioral1
Sample
676c0bfb2d1b898cddf848e2c763101c7fa7b23aebecb88b124761104d577147.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
676c0bfb2d1b898cddf848e2c763101c7fa7b23aebecb88b124761104d577147.exe
Resource
win10v2004-20231215-en
General
-
Target
676c0bfb2d1b898cddf848e2c763101c7fa7b23aebecb88b124761104d577147
-
Size
4.0MB
-
MD5
e8b41277658b8127e77b29b1607353d5
-
SHA1
8c4b795da01e32f32b965d2a05305b4dfbd14644
-
SHA256
676c0bfb2d1b898cddf848e2c763101c7fa7b23aebecb88b124761104d577147
-
SHA512
7f719be0c5d804996c0a6b2b2974d3cc6dd4544feac6727206f68d362306430ca16eb3b14676d66446e4b4827c8e2da8fbbc283f72d4b345f605e7d96502cfad
-
SSDEEP
49152:S2rX2rX2rX2rX2rX2rX2rX2rX2rX2rX2rX2rX2r9oyM2rX2rX2rX2rX2rX2r:lgggggggggggg9o4ggggg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 676c0bfb2d1b898cddf848e2c763101c7fa7b23aebecb88b124761104d577147
Files
-
676c0bfb2d1b898cddf848e2c763101c7fa7b23aebecb88b124761104d577147.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ