Static task
static1
Behavioral task
behavioral1
Sample
502ddef5160b642d2003f50c7bd2cf97.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
502ddef5160b642d2003f50c7bd2cf97.exe
Resource
win10v2004-20231222-en
General
-
Target
502ddef5160b642d2003f50c7bd2cf97
-
Size
656KB
-
MD5
502ddef5160b642d2003f50c7bd2cf97
-
SHA1
1e06ddac84c44f63e684572094370e389838b563
-
SHA256
c39e90b80da839e3444325d4f59113c96567210cc70d69404f9f5a7513ac4545
-
SHA512
cc84ac83471dce5b2485b2d3464df983e1fb743b34789d74a09d4ce1539918d01992b409d14353569f93681377d2d169d4de582412cd11c8b1ef08a7e7de7e4a
-
SSDEEP
12288:Joulafv8i1WFTP/km+Uwol1BzfjNJD6jDn7+tDTnLR:JBlaf9gFTnn+ejsDnEvV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 502ddef5160b642d2003f50c7bd2cf97
Files
-
502ddef5160b642d2003f50c7bd2cf97.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 440KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 208KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ