Static task
static1
Behavioral task
behavioral1
Sample
7005236ca79c87ab3fde1065d5257c00.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7005236ca79c87ab3fde1065d5257c00.exe
Resource
win10v2004-20231222-en
General
-
Target
7005236ca79c87ab3fde1065d5257c00
-
Size
291KB
-
MD5
7005236ca79c87ab3fde1065d5257c00
-
SHA1
4bfc499a578122a73b3ca34616a704c9f313cfd9
-
SHA256
db3f1cdbced21ae4c4c25abf5405dccb56d9484b851c3730a2d55ce223f9ce8d
-
SHA512
0f5a9f40265c704f2880208880578abf86242ee618aed14c569227993ceafc87e596b38e15ef76c57a3f30cf698db3d887b4ecb7cb718a61d5abe708cd58af19
-
SSDEEP
6144:LRapzQegi1J9+w7rjRrkTN1jZHvXVqbFurNrs:toH/9+erjRrkJ19Plq4ZY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7005236ca79c87ab3fde1065d5257c00
Files
-
7005236ca79c87ab3fde1065d5257c00.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 221KB - Virtual size: 221KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ihl Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.yoczu Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ