Static task
static1
Behavioral task
behavioral1
Sample
69be78b7e00b8018fc9a32f75f0fac888be65437f4a57131722a8b784d0f3584.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
69be78b7e00b8018fc9a32f75f0fac888be65437f4a57131722a8b784d0f3584.exe
Resource
win10v2004-20231215-en
General
-
Target
69be78b7e00b8018fc9a32f75f0fac888be65437f4a57131722a8b784d0f3584
-
Size
670KB
-
MD5
44ebc7300de4b58470e73ba24c12ddb6
-
SHA1
546471818c13161eb17bafb1823dedab4486b8ad
-
SHA256
69be78b7e00b8018fc9a32f75f0fac888be65437f4a57131722a8b784d0f3584
-
SHA512
3c4a84e630a39e7595148cee9533bbd1148e3b94105d68ba301a9138e0b65e0b9ed6cbc1e8030b16f1be5ee9b21b5fcd548bac48a7551b9a4fea903745e376b2
-
SSDEEP
12288:0rVrbQA8yBLf6TwuoU9djCBwXQSRjTRGOlaKhG7Ut5e/dkCnVj53XPDF:srJBL6ToKjCBuQSR7AO5e/dkQ3h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69be78b7e00b8018fc9a32f75f0fac888be65437f4a57131722a8b784d0f3584
Files
-
69be78b7e00b8018fc9a32f75f0fac888be65437f4a57131722a8b784d0f3584.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
w*O1! Size: 261KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 393KB - Virtual size: 392KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ