Static task
static1
Behavioral task
behavioral1
Sample
11f515ca99c472dba50a7a6666a08eda.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11f515ca99c472dba50a7a6666a08eda.exe
Resource
win10v2004-20231215-en
General
-
Target
11f515ca99c472dba50a7a6666a08eda.exe
-
Size
345KB
-
MD5
11f515ca99c472dba50a7a6666a08eda
-
SHA1
2408b3fb6b29ca7f1919fbdd0f598202015c895b
-
SHA256
84a36f5b64fcb4588dc62e6c8fab5f2779af637cbaf00c09ddeaed6d3f4f03b8
-
SHA512
38723d38a274b61c3f14a1cf872c07addee2e4eea5c5b214cc4823133b5eab8d58667f64430ab8863e4c1d61d03234f79668491d0c85b29a6f84cafaa24b37cc
-
SSDEEP
6144:vyRbsR0Q6GiiiGn9G5iiin55Yiiodd5nxiP55in554fiiYindGin5n5aJWQfSYPo:aRu0Q6GiiiGn9G5iiin55Yiiodd5nxi9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 11f515ca99c472dba50a7a6666a08eda.exe
Files
-
11f515ca99c472dba50a7a6666a08eda.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ