Static task
static1
Behavioral task
behavioral1
Sample
f1ba0000ca5e3000165e46e43d0b254f6935bd93feb32be64fa57f05732c5548.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f1ba0000ca5e3000165e46e43d0b254f6935bd93feb32be64fa57f05732c5548.exe
Resource
win10v2004-20231222-en
General
-
Target
f1ba0000ca5e3000165e46e43d0b254f6935bd93feb32be64fa57f05732c5548.exe
-
Size
1.3MB
-
MD5
909cb340d5eabf70ad24deedc43a270a
-
SHA1
a8ed4eda5b446131802a2adcef2513dd87c236ba
-
SHA256
f1ba0000ca5e3000165e46e43d0b254f6935bd93feb32be64fa57f05732c5548
-
SHA512
53874c041d7232dbd705bd6d12642c4c29818edb43000ab4c53fad0440f258882ee2f5bf4271e532505529bdc11d45db58f8355e1e29f5f64f7a1412a065b81e
-
SSDEEP
24576:htwiHwyD/YPmPUQlqjJ8f5yS2r+5IJarK/Hx:hOiHb71ZI9e5QS5IJaef
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1ba0000ca5e3000165e46e43d0b254f6935bd93feb32be64fa57f05732c5548.exe
Files
-
f1ba0000ca5e3000165e46e43d0b254f6935bd93feb32be64fa57f05732c5548.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ