Static task
static1
Behavioral task
behavioral1
Sample
cefa0a7b602f5c01f8a114f7f45ab39c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
cefa0a7b602f5c01f8a114f7f45ab39c.exe
Resource
win10v2004-20231222-en
General
-
Target
cefa0a7b602f5c01f8a114f7f45ab39c
-
Size
9KB
-
MD5
cefa0a7b602f5c01f8a114f7f45ab39c
-
SHA1
34c235ba50e378395ebdf2a8ad97d84e402f6dd9
-
SHA256
e092341347a7d6764cdf99fdbf287eb42967880da6625732185da2dca7c619b9
-
SHA512
4db8033c10ad309ccec775e29d69693fbcef6d1874082f57413b045b0016f5f4daa1695799ab477e6549e753102cc2d36f5c3b2d6a960d2665ec3bce717f9637
-
SSDEEP
96:FlKZFvRPPq+uEJGBFgpIH7hhC+hM6mpKdsvOv03vFuautYUpkkGgKeNVd8zzNt:FlKZVRNwFgObhAj6m0tnjGZKfY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cefa0a7b602f5c01f8a114f7f45ab39c
Files
-
cefa0a7b602f5c01f8a114f7f45ab39c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ