Static task
static1
Behavioral task
behavioral1
Sample
5272b3b2d315dc3995cb0b4855874ddbcf596f793f1c1799ddc3a0d6e066bf56.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5272b3b2d315dc3995cb0b4855874ddbcf596f793f1c1799ddc3a0d6e066bf56.exe
Resource
win10v2004-20231215-en
General
-
Target
5272b3b2d315dc3995cb0b4855874ddbcf596f793f1c1799ddc3a0d6e066bf56
-
Size
970KB
-
MD5
7b3e0bda717f1b51c2ecca91afb1e1af
-
SHA1
eb12fc514cddd536d17838fc34b071dcc5d85d9f
-
SHA256
5272b3b2d315dc3995cb0b4855874ddbcf596f793f1c1799ddc3a0d6e066bf56
-
SHA512
b4bf6bccb2b8aa76284582f0f15ae216c8c1ab96b23575cd67ba8d7d3ed421a2456f9457cec299f947136a93f893b1844546fc0291d088ea6da41a7234128f06
-
SSDEEP
24576:gOONF/sGMa1cHYOh7Xs5CAHsRYheFDnasCu90qtg/:DeUGMiczh7OtH2YgFDnlPK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5272b3b2d315dc3995cb0b4855874ddbcf596f793f1c1799ddc3a0d6e066bf56
Files
-
5272b3b2d315dc3995cb0b4855874ddbcf596f793f1c1799ddc3a0d6e066bf56.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 967KB - Virtual size: 966KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ