Static task
static1
Behavioral task
behavioral1
Sample
295f0a57a5e69b701359a80ed15ab338.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
295f0a57a5e69b701359a80ed15ab338.exe
Resource
win10v2004-20231222-en
General
-
Target
295f0a57a5e69b701359a80ed15ab338
-
Size
435KB
-
MD5
295f0a57a5e69b701359a80ed15ab338
-
SHA1
9ea6a935e70bcdd864c882afb056c9a046389a05
-
SHA256
d366619e696013333ed98b3aa03567638e56286ded05fb34da197481fa4d89fe
-
SHA512
9fb8d61630780a5079d1bc647818bd0d9b707955e1428e3518333eb0213d7dcc1e28a8156c1845b90e6bf7b0f1cdad7870ddb6ed160c8ee04f2be9cdec22b56e
-
SSDEEP
12288:IHn2eF7god+QEy5xV1EiQZbGx09L8CkMTOZ2:xwg1QEy5xV1xqMMT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 295f0a57a5e69b701359a80ed15ab338
Files
-
295f0a57a5e69b701359a80ed15ab338.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 432KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ