Static task
static1
Behavioral task
behavioral1
Sample
638b2076b8254e21243ba434a06b1c96bf451af3566b3e624dc5af8904eb3a7b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
638b2076b8254e21243ba434a06b1c96bf451af3566b3e624dc5af8904eb3a7b.exe
Resource
win10v2004-20231215-en
General
-
Target
638b2076b8254e21243ba434a06b1c96bf451af3566b3e624dc5af8904eb3a7b
-
Size
737KB
-
MD5
f7d956dd77ca0f804fe7d9ac55ed0782
-
SHA1
2e7a30be30696744fc09a91260a0bc741c6c046e
-
SHA256
638b2076b8254e21243ba434a06b1c96bf451af3566b3e624dc5af8904eb3a7b
-
SHA512
9cbf0444de7be39d6a636023a9438d1c991fc712e8567a843739d79ade364cffed971b0b364179ae0f1fe630347b1e8486c4b19c237d44535c742b2d90e218d0
-
SSDEEP
12288:Bm1emkVhgjjN2iN+X6YJSaZkWYCDAgJaPCFAmAooeY7TZGgxLYWjmVGKA5FPX:Bm0DgjjN1CFSEaP0bBQ7F1uGn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 638b2076b8254e21243ba434a06b1c96bf451af3566b3e624dc5af8904eb3a7b
Files
-
638b2076b8254e21243ba434a06b1c96bf451af3566b3e624dc5af8904eb3a7b.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 735KB - Virtual size: 734KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ