Static task
static1
Behavioral task
behavioral1
Sample
a61589bc1fbf8a004af8b09f9140597f8f3fc40e7ede6c52bd77c8447d34f23a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a61589bc1fbf8a004af8b09f9140597f8f3fc40e7ede6c52bd77c8447d34f23a.exe
Resource
win10v2004-20231215-en
General
-
Target
a61589bc1fbf8a004af8b09f9140597f8f3fc40e7ede6c52bd77c8447d34f23a.exe
-
Size
844KB
-
MD5
81ac69ddd23f063858f22945eb9cd3de
-
SHA1
fd6e0b4492c8d831c01d04c0c6bc31cc10361977
-
SHA256
a61589bc1fbf8a004af8b09f9140597f8f3fc40e7ede6c52bd77c8447d34f23a
-
SHA512
1cfa72d240ffeff379dc81b05aa1e603e800b6becf8d3d0d2e5ddc21e7e8c6dc0c268bf6ebf9b2e6a7a4c68cab8c8e9cb9b4b58ac7289ae1f2c22ca477da021d
-
SSDEEP
24576:oA+pfAXYT4k1d4vs37DB06HAi4A9FkJsO4:sXrzysX+6GA9c4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a61589bc1fbf8a004af8b09f9140597f8f3fc40e7ede6c52bd77c8447d34f23a.exe
Files
-
a61589bc1fbf8a004af8b09f9140597f8f3fc40e7ede6c52bd77c8447d34f23a.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 825KB - Virtual size: 825KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ