Static task
static1
Behavioral task
behavioral1
Sample
1e4f858f0b7cfefb01e3d37f0c2f373b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1e4f858f0b7cfefb01e3d37f0c2f373b.exe
Resource
win10v2004-20231215-en
General
-
Target
1e4f858f0b7cfefb01e3d37f0c2f373b
-
Size
3.5MB
-
MD5
1e4f858f0b7cfefb01e3d37f0c2f373b
-
SHA1
f26ce26397bb0d0a8815d4c60ee4c339e4dcdc8e
-
SHA256
725869ff6f049d561238a1c090b2f562420e609f5b8d89eef2524de03226fcfc
-
SHA512
561fc9e3051f0d2f304bed4ad34b4f860eaa0d8351ccf86fd49414ddbaf787439d935a8dee91dfa4de05d03c747a6aa9b4d9b90bb5edc720d5ae33ffffbc02c4
-
SSDEEP
49152:bjbcWccUV4qCNhot118XSPqalFbS+OvhUMhn6RFYD2XjJsC9ye2GiSIdSzdpcNet:zc9c7qFt118XSjlon6fe0hse5wcn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e4f858f0b7cfefb01e3d37f0c2f373b
Files
-
1e4f858f0b7cfefb01e3d37f0c2f373b.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ