Static task
static1
Behavioral task
behavioral1
Sample
a5d72177b09e4ad9f7c0807e9be2344ff956dd3fc6c8ee7c267b955a7d21fe29.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a5d72177b09e4ad9f7c0807e9be2344ff956dd3fc6c8ee7c267b955a7d21fe29.exe
Resource
win10v2004-20231215-en
General
-
Target
a5d72177b09e4ad9f7c0807e9be2344ff956dd3fc6c8ee7c267b955a7d21fe29
-
Size
614KB
-
MD5
a4faefa52e6d5fbc75c108e724899971
-
SHA1
be9060e5944d44826fbcce6c9810a05f58e8c9bf
-
SHA256
a5d72177b09e4ad9f7c0807e9be2344ff956dd3fc6c8ee7c267b955a7d21fe29
-
SHA512
430d658f389812ea3ca5b196712a9dcdfe175c89a9b9c5be883aee3a876437a20d2fa4e8a8fa9a7e5716b9b89f663c1c50a9585a1589b3e2485c0eac08ac46a2
-
SSDEEP
12288:fT0orjPEsa9RXZ9Iocoiy/gXTGLa1YW0JnC5qCa07rnktzTg:wcjPEB9IxoiXDGOJGC517rnkC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5d72177b09e4ad9f7c0807e9be2344ff956dd3fc6c8ee7c267b955a7d21fe29
Files
-
a5d72177b09e4ad9f7c0807e9be2344ff956dd3fc6c8ee7c267b955a7d21fe29.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 612KB - Virtual size: 611KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ