Static task
static1
Behavioral task
behavioral1
Sample
86859bd3c54a917cd4c715c2f2308257c068c452282cbb9bd13496fdf1dcac8a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
86859bd3c54a917cd4c715c2f2308257c068c452282cbb9bd13496fdf1dcac8a.exe
Resource
win10v2004-20231215-en
General
-
Target
86859bd3c54a917cd4c715c2f2308257c068c452282cbb9bd13496fdf1dcac8a
-
Size
5.0MB
-
MD5
a8950930ba1589a19536d9ebc495c9a6
-
SHA1
83d7fda0865b9e7ec3ec1175059acbcd1bc850a7
-
SHA256
86859bd3c54a917cd4c715c2f2308257c068c452282cbb9bd13496fdf1dcac8a
-
SHA512
701aec81e98c593e0ee5bf99f2267d957fa2ffed12eb830856b3357ece59b3e10554003ae68e2e53858ac447c18af898ccc547bb4d7224dd9db8f13c62fa1da2
-
SSDEEP
98304:YESELEhh2uEhh2uEhh27EWh22qQlQY9S4/eV4d0kqXf0FoL6uqtWtdE:6cjcjcfc2quzXY42kSIob8Wt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86859bd3c54a917cd4c715c2f2308257c068c452282cbb9bd13496fdf1dcac8a
Files
-
86859bd3c54a917cd4c715c2f2308257c068c452282cbb9bd13496fdf1dcac8a.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ