Static task
static1
Behavioral task
behavioral1
Sample
0871e2b615665420698c965e5911771d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0871e2b615665420698c965e5911771d.exe
Resource
win10v2004-20231215-en
General
-
Target
0871e2b615665420698c965e5911771d
-
Size
8.8MB
-
MD5
0871e2b615665420698c965e5911771d
-
SHA1
2b8458efc25cf5b48c4aaba8d03812a58c8c4e82
-
SHA256
a5c07aaa801e3150e0b2fc1b9af7b88645b709368581351faf82126d7f31cbce
-
SHA512
4f3b4089119e1239ca8c48df5e839a88cdd5edbfd5786a49ce5a256e9ed7d9e10269124a60c28ec9ecd2e84afb4bf02ad00f034c6b565c9cc7d1ead14446a5b4
-
SSDEEP
98304:iJAJ3LTjGEP1qZZZ8cZxRXcWTz4opHhutUIWSfGL0sxya:iJCBP8ZZZ8cjpcWP1hAUexA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0871e2b615665420698c965e5911771d
Files
-
0871e2b615665420698c965e5911771d.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 8.5MB - Virtual size: 8.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 266KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ