Static task
static1
Behavioral task
behavioral1
Sample
445ba4175c9e16875f332e8d1697650e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
445ba4175c9e16875f332e8d1697650e.exe
Resource
win10v2004-20231215-en
General
-
Target
445ba4175c9e16875f332e8d1697650e
-
Size
775KB
-
MD5
445ba4175c9e16875f332e8d1697650e
-
SHA1
f366d34b3e55bb926d5cd39b195498190a1f2d83
-
SHA256
197b413f67494560b4eb19ac42196acec6bdfca76ebfa74656d167f6a6d3ff0b
-
SHA512
be5fb2e7347894fcf661307c4aef4778f9ed7466258e6602b8a02304f7c202e8460784b7dd6b85c15ecbeddfa5c5ae356bd5318b5531a2fad368dfac57d8d14a
-
SSDEEP
12288:ip5bu9TlLfUTdwq145R6wYVs926n1K0OZUlAGisvb6Rf:ivbuhZUTd25R6wE/p0OZUCGfWl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 445ba4175c9e16875f332e8d1697650e
Files
-
445ba4175c9e16875f332e8d1697650e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 640KB - Virtual size: 640KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ