Static task
static1
Behavioral task
behavioral1
Sample
SSI GLORIOUS PARTICULARS.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
SSI GLORIOUS PARTICULARS.exe
Resource
win10v2004-20231215-en
General
-
Target
SSI GLORIOUS PARTICULARS.exe
-
Size
645KB
-
MD5
776483e91d81e83a64ff6d65e7b60a81
-
SHA1
a9f3c8009afa874d7130b195e782ac77277176cf
-
SHA256
55f2afe80aaf7acecb9a81cd6171b4bf54a30aca00df32c4fc42aeb37d383f39
-
SHA512
a60823dfa37c31e90b36780060ec1d118f71b55018f428dd80c44db3c65828d0b0f865c47ec2b02f003c93e3fb6192d7da53635d4a0fa7f5d85f8f66e704e830
-
SSDEEP
12288:GPWjLBJI3+X+qYjNKEr3QSYb8yG37lro4/f7iTsydnmlcMekgoGKU0XjV:djru+TUNfr3N3a4/f7aJGTekWKU0p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SSI GLORIOUS PARTICULARS.exe
Files
-
SSI GLORIOUS PARTICULARS.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 635KB - Virtual size: 635KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ