Static task
static1
Behavioral task
behavioral1
Sample
109c0c33967c4ce1f4fff3918dc588c8.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
109c0c33967c4ce1f4fff3918dc588c8.exe
Resource
win10v2004-20231215-en
General
-
Target
109c0c33967c4ce1f4fff3918dc588c8
-
Size
160KB
-
MD5
109c0c33967c4ce1f4fff3918dc588c8
-
SHA1
13df08cd5a460905fd7e1977b3fb65154e257545
-
SHA256
80af7f35822ecca31459aa4b605ba0d2d72f1efeaed66101f467c1a1a885ee34
-
SHA512
b52307b44be1dd7abf3576925faf55f3f78adb647e5b5e0575278bbf2beca546b5f32e7ff84c969cc82a6ebe63e0fd4680f6f223e2af1782f323243021621a95
-
SSDEEP
1536:jb3GmZTjsqCgRXfu6hz25QmFaCYUXb3GmZTjsqCgRXfu6hz25QmFaCYUwl6:1sqrSQmdYUBsqrSQmdYUwl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 109c0c33967c4ce1f4fff3918dc588c8
Files
-
109c0c33967c4ce1f4fff3918dc588c8.exe windows:4 windows
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 148KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ