Static task
static1
Behavioral task
behavioral1
Sample
54cecee0868e914e207f565c5076917e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
54cecee0868e914e207f565c5076917e.exe
Resource
win10v2004-20231222-en
General
-
Target
54cecee0868e914e207f565c5076917e
-
Size
326KB
-
MD5
54cecee0868e914e207f565c5076917e
-
SHA1
88e481a9db5ca7e8dcef65087e2a571e0bc57620
-
SHA256
57e38cc351f85af87c03a147e900f3c87b3da52e1d223605de5437453917c2e2
-
SHA512
7712c66beee84db39500cea0da89c613052c5637b2db1664f12c01dae7a2292f79361da244d077d0bd5547d27652dd2c675d37d6e3d335890650a868fd4650cd
-
SSDEEP
6144:8wg2rVMFxY2y5HwsA+bTRfLdWpfwMKQWZzU:BriTY2/6TRfQ1wMKn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54cecee0868e914e207f565c5076917e
Files
-
54cecee0868e914e207f565c5076917e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 324KB - Virtual size: 323KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 700B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ