Static task
static1
Behavioral task
behavioral1
Sample
639fb4f66762b32852451319b841d24b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
639fb4f66762b32852451319b841d24b.exe
Resource
win10v2004-20231215-en
General
-
Target
639fb4f66762b32852451319b841d24b
-
Size
225KB
-
MD5
639fb4f66762b32852451319b841d24b
-
SHA1
375ff07e3d8560fba1acee300aee54902fe176bc
-
SHA256
71b6b50cdf1367ab925cb3dd18be0658d902aec67cf2afc5c60daa8b6bc39953
-
SHA512
68ff4a3fce71db13f19425245a8ad5fd774ff282a74148073c6256d89277e27604bd08bac07195f774ff2a1f91762d2b0970ce8b7ba584e2c76f8c07aa5e81f1
-
SSDEEP
3072:mFaj5U/8VnDrVyltmZAyuCfxMcaIqhl4m+P9GjS4SqIQR2XPi9y:BDrwGzuAM9I4gUjS4SqH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 639fb4f66762b32852451319b841d24b
Files
-
639fb4f66762b32852451319b841d24b.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 222KB - Virtual size: 221KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.vpr Size: 512B - Virtual size: 8KB