Static task
static1
Behavioral task
behavioral1
Sample
60bae9c9154ac01436ee1a519b4472fd3c3e73a8449086a2b60691699e03dd3c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
60bae9c9154ac01436ee1a519b4472fd3c3e73a8449086a2b60691699e03dd3c.exe
Resource
win10v2004-20231215-en
General
-
Target
60bae9c9154ac01436ee1a519b4472fd3c3e73a8449086a2b60691699e03dd3c.exe
-
Size
897KB
-
MD5
7683b52ab3ac3dbe3310db3d04a0d527
-
SHA1
e4f71226e12294ffdd4e4dd3815492e43297f7cc
-
SHA256
60bae9c9154ac01436ee1a519b4472fd3c3e73a8449086a2b60691699e03dd3c
-
SHA512
e175c6064636e4c996df9cecc116f70cef3378066f2977f48f53f902970dc8bd8d0e737f092b960fe851a8f79a1c689c73d2598ac769f4a4b2e7cd69794d58b8
-
SSDEEP
24576:2aC1QXekvoQ8qe/UaEBUP8ePdfPKgYj1Vev:WtAoQbFg8ePJPKgYj1Vev
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60bae9c9154ac01436ee1a519b4472fd3c3e73a8449086a2b60691699e03dd3c.exe
Files
-
60bae9c9154ac01436ee1a519b4472fd3c3e73a8449086a2b60691699e03dd3c.exe.exe windows:4 windows x86 arch:x86
a0f93b1820ad14bb6c6db3be84f72920
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ucrtbase_clr0400
isprint
__libm_sse2_acosf
shlwapi
SHFormatDateTimeA
kernelbase
EnumerateExtensionNames
advapi32
CreateProcessWithLogonW
Sections
.text Size: 886KB - Virtual size: 886KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ