Static task
static1
Behavioral task
behavioral1
Sample
2cf78b9499d5ba086837764e719181e86f52d143b643ff759c49268c4ff4c78a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2cf78b9499d5ba086837764e719181e86f52d143b643ff759c49268c4ff4c78a.exe
Resource
win10v2004-20231215-en
General
-
Target
2cf78b9499d5ba086837764e719181e86f52d143b643ff759c49268c4ff4c78a
-
Size
650KB
-
MD5
624eb8433baebc9a36f30b9749cec339
-
SHA1
4fa63fd4876bd400056476c83bde0917a14e4a8f
-
SHA256
2cf78b9499d5ba086837764e719181e86f52d143b643ff759c49268c4ff4c78a
-
SHA512
3fecfe32015ff545fd07f20e2f611ac1bc5fde06d7693651d3b2949463e58d192ac30e43f7f6eab54ff8dc0d4de73ce56453f63b78fc6349e1a4a543a53718e7
-
SSDEEP
12288:52GoR7XxG11LeHanZH0mk/5TNCsevyk8lMhdlU2FRNN:5zoJxGfikt07dNzH1YfhFRNN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cf78b9499d5ba086837764e719181e86f52d143b643ff759c49268c4ff4c78a
Files
-
2cf78b9499d5ba086837764e719181e86f52d143b643ff759c49268c4ff4c78a.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 641KB - Virtual size: 640KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ