Static task
static1
Behavioral task
behavioral1
Sample
3170d66b1ebb6c8df484552243a18ef63794550fdad0d599f27654f803b3594e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3170d66b1ebb6c8df484552243a18ef63794550fdad0d599f27654f803b3594e.exe
Resource
win10v2004-20231215-en
General
-
Target
3170d66b1ebb6c8df484552243a18ef63794550fdad0d599f27654f803b3594e.exe
-
Size
6KB
-
MD5
160663874fd9f6e4983c83f71278649c
-
SHA1
430136f5632b35b312809209c52d8e94b602e000
-
SHA256
3170d66b1ebb6c8df484552243a18ef63794550fdad0d599f27654f803b3594e
-
SHA512
61e9cb8acd6554601f8dbf51174afca6ec843843a2a389d43049b8a57db84123b0ffe6970f2ef139edbb74cc3e7acf5047e8ef3259a1c319b6736c7d3d4a29ab
-
SSDEEP
96:rIj7THc6MM/o74lNzFlYlMuOJyjfchZllC9zNt:q7T8A/o74lNzgGJygTC3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3170d66b1ebb6c8df484552243a18ef63794550fdad0d599f27654f803b3594e.exe
Files
-
3170d66b1ebb6c8df484552243a18ef63794550fdad0d599f27654f803b3594e.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ