Static task
static1
Behavioral task
behavioral1
Sample
7154831bd219922f21cdb4545fcb6753881c1a9eed612d3129e813e230232ed6.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7154831bd219922f21cdb4545fcb6753881c1a9eed612d3129e813e230232ed6.exe
Resource
win10v2004-20231215-en
General
-
Target
7154831bd219922f21cdb4545fcb6753881c1a9eed612d3129e813e230232ed6
-
Size
460KB
-
MD5
1f95c2f3c1a82a285931b6feca091f60
-
SHA1
afcb88d32344237da89c54d8bffb54b98db1ad4b
-
SHA256
7154831bd219922f21cdb4545fcb6753881c1a9eed612d3129e813e230232ed6
-
SHA512
a4ccb057409ed7d896dca318b4db17c719d23227c8477bde810fcd986110aa41fea51948dcbe5cd13ed9f8a8245f864cd38f35fa9798e32267ed9b332126d839
-
SSDEEP
6144:e9rArVYcJhIRRRPk1OmTMKRl1GD12cAURBP54evqf6mO3D6Se1fuJh:wr67IRRRP0OwRa2cRRBP2eSO3n0fu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7154831bd219922f21cdb4545fcb6753881c1a9eed612d3129e813e230232ed6
Files
-
7154831bd219922f21cdb4545fcb6753881c1a9eed612d3129e813e230232ed6.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 409KB - Virtual size: 408KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ