Static task
static1
Behavioral task
behavioral1
Sample
7861b936cc3aefc014b8d7d906a1c596.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7861b936cc3aefc014b8d7d906a1c596.exe
Resource
win10v2004-20231215-en
General
-
Target
7861b936cc3aefc014b8d7d906a1c596
-
Size
44KB
-
MD5
7861b936cc3aefc014b8d7d906a1c596
-
SHA1
8a52badc4d56bb6dcf2759dfc53ce895301ce6b2
-
SHA256
eb44043c47df9279a8b0bf660b8dd35d8d4b9414c7d20f208ca6cd32b718512c
-
SHA512
d8f25ad409c3f615cc25e59ffd7bfb4f4adf7ce88ceb5144625eec28d09d6ebce63e599c76760819b654f469fc79caaf86d75e863adef80e7ef611323f02c784
-
SSDEEP
768:v7EN+vMVUDdbgcIHGzSYKVYK4xi6JLj/HbwgzHIhwO2GTf:4qw0tLSYTi6LTbwgzHmf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7861b936cc3aefc014b8d7d906a1c596
Files
-
7861b936cc3aefc014b8d7d906a1c596.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ