Static task
static1
Behavioral task
behavioral1
Sample
be0bf3020e394c001a0b1754ca7e3d708e5973b2bff748c033a14de047cfb9f8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
be0bf3020e394c001a0b1754ca7e3d708e5973b2bff748c033a14de047cfb9f8.exe
Resource
win10v2004-20231215-en
General
-
Target
be0bf3020e394c001a0b1754ca7e3d708e5973b2bff748c033a14de047cfb9f8.exe
-
Size
2.4MB
-
MD5
c51c28da7f4fead433f4c6a70b08565a
-
SHA1
7cb55154f7b21231f95e00a689766504ea38a8c3
-
SHA256
be0bf3020e394c001a0b1754ca7e3d708e5973b2bff748c033a14de047cfb9f8
-
SHA512
25aaa0ef8c01140b9a080f3c9fa2168f47cf233bd2273b7b71749d4cf38b621e228259d8728d0d20dd4bf344a4f985b5517fa39a185347db236413ca52c1b2f8
-
SSDEEP
24576:eKY2QRmWYCw7sULqPyZwSxIshnWIjm7vZAjX+ez87TkQPI1Q7SGZDLT8S46D+:RY2QgWelwSx9WkiLekTk1JMB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be0bf3020e394c001a0b1754ca7e3d708e5973b2bff748c033a14de047cfb9f8.exe
Files
-
be0bf3020e394c001a0b1754ca7e3d708e5973b2bff748c033a14de047cfb9f8.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ