Static task
static1
Behavioral task
behavioral1
Sample
5043fd2f0c30ee252711ee02083339bb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5043fd2f0c30ee252711ee02083339bb.exe
Resource
win10v2004-20231215-en
General
-
Target
5043fd2f0c30ee252711ee02083339bb
-
Size
1.2MB
-
MD5
5043fd2f0c30ee252711ee02083339bb
-
SHA1
060d7cdb687086d2d806c49026d315dd385e0bd7
-
SHA256
4dbc3d787b8f2b87544d410ffe647b2c10771327eda0ee7163a30ff677d58cbe
-
SHA512
94342551c4f22e7b9dbb6517ee1b4c6b3def402ffa9f848dd790784db5daab9d04dc495b8e208b30f118666334cfe9de5051a74b20579f121cf57c014d0b1fe0
-
SSDEEP
24576:aY6HCmKWjOsBgo0q4wMYFVKL5GtLkkQ11B31rDWzsvl:aUWyoHMYzKLYBkhf1rJd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5043fd2f0c30ee252711ee02083339bb
Files
-
5043fd2f0c30ee252711ee02083339bb.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ