Static task
static1
Behavioral task
behavioral1
Sample
7ea231f39192e6c435ad442cd16cf609d52941661a50af7537f4523498521cb2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7ea231f39192e6c435ad442cd16cf609d52941661a50af7537f4523498521cb2.exe
Resource
win10v2004-20231222-en
General
-
Target
7ea231f39192e6c435ad442cd16cf609d52941661a50af7537f4523498521cb2
-
Size
44.8MB
-
MD5
0c4816b7b85650d3f14dc4494bc02df1
-
SHA1
33862115b0ee65f6680a3907a6191d5eca9bca04
-
SHA256
7ea231f39192e6c435ad442cd16cf609d52941661a50af7537f4523498521cb2
-
SHA512
43298194753c7e6641ad1663c3016cc3ddf833c2dad61e2a9caff1b2007a5c60169243595cad190952fa555a7a52fe50360ba16da007bdbb0c20b994c39a8ee1
-
SSDEEP
786432:MVmrtqGTmqcKl7YvGIRPkkj/lbp+29EkDd36CTmIw9:gmRlIBZFpsA6n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ea231f39192e6c435ad442cd16cf609d52941661a50af7537f4523498521cb2
Files
-
7ea231f39192e6c435ad442cd16cf609d52941661a50af7537f4523498521cb2.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 44.8MB - Virtual size: 44.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ