Static task
static1
Behavioral task
behavioral1
Sample
000100049000TK.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
000100049000TK.exe
Resource
win10v2004-20231222-en
General
-
Target
59afe3436eee2e9f3c9a5556cf33cef7
-
Size
460KB
-
MD5
59afe3436eee2e9f3c9a5556cf33cef7
-
SHA1
43078f70d254753e59c8a920a7f27a1f5cc8e31f
-
SHA256
39cd5c2dd4929b254d9ef4bf758ce2401e49fd5da55ae97ad1939db2cc3acdce
-
SHA512
2ec7599b3e7521d65c47f9289d4dd118ae8274634d4cf2a1cff6d701d62dbf650b8d82f3fc9826def01afcb498a4d5278e3664ed01cad354f195a037f90887af
-
SSDEEP
12288:KuL4A/KxFv2y8Ymc96MnWJVtayr0tiEyK7I/HDdn+gtfTg:KuLz/2FOrMnWJvrWiEv7e+kTg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/000100049000TK.exe
Files
-
59afe3436eee2e9f3c9a5556cf33cef7.zip
-
000100049000TK.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 948KB - Virtual size: 947KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ