Static task
static1
Behavioral task
behavioral1
Sample
17eed9e5eb1a63817d7d896a8f3a71f9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
17eed9e5eb1a63817d7d896a8f3a71f9.exe
Resource
win10v2004-20231215-en
General
-
Target
17eed9e5eb1a63817d7d896a8f3a71f9
-
Size
867KB
-
MD5
17eed9e5eb1a63817d7d896a8f3a71f9
-
SHA1
6cf8fb3ba241e4833b40c793509d6fa4a12d83a0
-
SHA256
a8f7039e38c57a47b41ba78a2e0b78efb9c4438f8f36bb15df8b36ae04cce60b
-
SHA512
e203e2dfe2f4cbbc89d84ef996d35a13724dc49b9e96187ff897bc23611551116c3a3cc3028cdacfefe741cdeb976a3a0a64f1ad6c9dae2e12305b1f23244171
-
SSDEEP
12288:PJDc9F3nC0Py3gAhXEJbjJEK5nzKfIh+OWJp10s07snoA:unzKfIHWJp6n7soA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17eed9e5eb1a63817d7d896a8f3a71f9
Files
-
17eed9e5eb1a63817d7d896a8f3a71f9.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 865KB - Virtual size: 864KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ