Static task
static1
Behavioral task
behavioral1
Sample
2657fa141ff2e9e0ff7c8d1412814333.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2657fa141ff2e9e0ff7c8d1412814333.exe
Resource
win10v2004-20231215-en
General
-
Target
2657fa141ff2e9e0ff7c8d1412814333
-
Size
788KB
-
MD5
2657fa141ff2e9e0ff7c8d1412814333
-
SHA1
0ad4496686cc778fa6964b2833dc030165580dc9
-
SHA256
b96e2add8b9a663566f740d06f882ee0147aab444bb026c9d1ce6998927f3d53
-
SHA512
6d8c69c44471fc163f5cf35e1dc4d2c10910abac02c5d44760fb950e6de07a38905144fba943372880004b210fcfaf2b76ffdb7a81a47c36c49804788d3b869c
-
SSDEEP
12288:9c59OK1OnRHhQCcHzV1HDV0OwboeQ1jwt2NjFqOl2K:9WERHhQNHzV2MegjwMNjL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2657fa141ff2e9e0ff7c8d1412814333
Files
-
2657fa141ff2e9e0ff7c8d1412814333.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 601KB - Virtual size: 600KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ