Static task
static1
Behavioral task
behavioral1
Sample
0626465ec4a2e4523888153e21eeae1f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0626465ec4a2e4523888153e21eeae1f.exe
Resource
win10v2004-20231222-en
General
-
Target
0626465ec4a2e4523888153e21eeae1f
-
Size
59KB
-
MD5
0626465ec4a2e4523888153e21eeae1f
-
SHA1
e6acc75e4386024bf19144c070aae8c3d349e01f
-
SHA256
2495111d2878ab8dd4076e68fcee0e36ccb28052d863aee1b838cf3898cf748f
-
SHA512
179505eefec15f4577d2b6faeee8825bcd00ee79e66b3af25fbc00adf571ff0bea1b0f0897b00276976f5218d201baffba9a16539b97b23c315e39b3028bbf21
-
SSDEEP
1536:rbRszdqF3q6un9+b87B4zEcAAO79JVVTNX:r93qnbT59JVvX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0626465ec4a2e4523888153e21eeae1f
Files
-
0626465ec4a2e4523888153e21eeae1f.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ