Static task
static1
Behavioral task
behavioral1
Sample
3056807c649be64dd25d0b63ffab56e1205ed60365bf153c1d5644a446c09d76.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3056807c649be64dd25d0b63ffab56e1205ed60365bf153c1d5644a446c09d76.exe
Resource
win10v2004-20231222-en
General
-
Target
3056807c649be64dd25d0b63ffab56e1205ed60365bf153c1d5644a446c09d76
-
Size
100.0MB
-
MD5
819b26f4dad4f378fa0494d5fd881c0f
-
SHA1
3320546812b0411c701e47651792233071719689
-
SHA256
3056807c649be64dd25d0b63ffab56e1205ed60365bf153c1d5644a446c09d76
-
SHA512
07c17f26e470e3710a95976595ddb78d8da5e747b4a382eef1955f0470f4e31bba14c421a156eaacf90df7e846d414ed0f3f591a94a09530e435b4b551f31abd
-
SSDEEP
384:a5zeyR+ONE6nIlxQiiRwmBnytgCBrdcfXsbwet3Tik+n1qQuYJcSox:asOG6naCJqmwthJaf+Nt33fERox
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3056807c649be64dd25d0b63ffab56e1205ed60365bf153c1d5644a446c09d76
Files
-
3056807c649be64dd25d0b63ffab56e1205ed60365bf153c1d5644a446c09d76.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ