Static task
static1
Behavioral task
behavioral1
Sample
02f18f2229ed3d6b64a349ce030b1deedfb7a8a0f3b01455562520cf911b190a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
02f18f2229ed3d6b64a349ce030b1deedfb7a8a0f3b01455562520cf911b190a.exe
Resource
win10v2004-20231222-en
General
-
Target
02f18f2229ed3d6b64a349ce030b1deedfb7a8a0f3b01455562520cf911b190a
-
Size
464KB
-
MD5
a6d2a0e3d40efc944d5628280ae1a2f4
-
SHA1
7d865564c70ca79e8f4c66de5ac692f32bd5e0db
-
SHA256
02f18f2229ed3d6b64a349ce030b1deedfb7a8a0f3b01455562520cf911b190a
-
SHA512
c171300869de3fb84641cf12eb92b16dc7a23bffbd5f7d9bb8700f07047053241af72a2ff42308533cc40c6358020d04491fecf0e851aab9a6158a2ba0a79a87
-
SSDEEP
6144:aMPL39gdFYKZA2RYZOvhWk2mhIdMkcIqdFHKZA2RYZOvhWk2mhISq:leUh8dlIeXh8dlIb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02f18f2229ed3d6b64a349ce030b1deedfb7a8a0f3b01455562520cf911b190a
Files
-
02f18f2229ed3d6b64a349ce030b1deedfb7a8a0f3b01455562520cf911b190a.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 239KB - Virtual size: 239KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 223KB - Virtual size: 223KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ