Static task
static1
Behavioral task
behavioral1
Sample
228ae9f3b0b8e8b6591211a1eb72dd3e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
228ae9f3b0b8e8b6591211a1eb72dd3e.exe
Resource
win10v2004-20231222-en
General
-
Target
228ae9f3b0b8e8b6591211a1eb72dd3e
-
Size
1.1MB
-
MD5
228ae9f3b0b8e8b6591211a1eb72dd3e
-
SHA1
210d71ccc2b1539b65fb07a4834fe04d777ad88d
-
SHA256
2b8ac768796de30803bc5bb6f116d39d0ee7843715b66b875d0942029d14e172
-
SHA512
df95e65408d2e5f3827d05da8e5df21e5fecd6a6652206125441e58505f915f970761218922cb3e88d87b64e9b5a9cd046da4d128984d2774d9eab4593f6551f
-
SSDEEP
12288:xMqVqAggzb7TrczsRNfhOo0p+vIn1gtx+XWboesoAK7zxkZsG8A6G738:xMIgg3MKNf7i6Sm2xesTK7zCZsGUys
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 228ae9f3b0b8e8b6591211a1eb72dd3e
Files
-
228ae9f3b0b8e8b6591211a1eb72dd3e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ