Static task
static1
Behavioral task
behavioral1
Sample
7954d8ff939bdcfffb6141271821ec34.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7954d8ff939bdcfffb6141271821ec34.exe
Resource
win10v2004-20231215-en
General
-
Target
7954d8ff939bdcfffb6141271821ec34
-
Size
593KB
-
MD5
7954d8ff939bdcfffb6141271821ec34
-
SHA1
79e11e207104ba229b2de7b7ce955d8fccd0995b
-
SHA256
64f2fef5d40cd9eed209f7b6485bab15b5bcbeff5c56ade077ff409b0eacaf08
-
SHA512
87ec60fe622b4f6dde7c2518804271d776dbedca8e5c44ee025e55d4eab2fcb2a8b1b33199a65215d77988383825da4061ea0e243f6ab1407b7058bd35cf0bae
-
SSDEEP
3072:4R5/5kKXCxI/BmYGSxSx/qmpF4l23DqDk+6TINr5mPjtTU3VGNUrn3GTVlE3488v:4T/y/774KgPlkeD8ZQg1pwZGXrUsBi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7954d8ff939bdcfffb6141271821ec34
Files
-
7954d8ff939bdcfffb6141271821ec34.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 591KB - Virtual size: 590KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ