Static task
static1
Behavioral task
behavioral1
Sample
468fd8adacd3c6613a9eef58f44896c1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
468fd8adacd3c6613a9eef58f44896c1.exe
Resource
win10v2004-20231215-en
General
-
Target
468fd8adacd3c6613a9eef58f44896c1
-
Size
26KB
-
MD5
468fd8adacd3c6613a9eef58f44896c1
-
SHA1
e54c36a24312f34b5579495edb9adb477b337e4d
-
SHA256
68735557cc97dcbfdf29ff895a9942ad70240609849255dacb0b34ecb0a97eef
-
SHA512
38240cf2006d36aabef4fe00a8b7ffb7452e121eacfeae4c148dc6f22c725ca3482b51b48c0377cf29f23ec34efa504a32be573a0bb8648de9ca20fc2bbb02ce
-
SSDEEP
768:ID/qkU8q47bwlfGI8vGJVoXK/QsRZ5uKp:ePDAl+uWXK4svhp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 468fd8adacd3c6613a9eef58f44896c1
Files
-
468fd8adacd3c6613a9eef58f44896c1.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ