Static task
static1
Behavioral task
behavioral1
Sample
f95262165f9afdd1f502b629aaeb753e75bd91d4b743f829af52d4e7cdfa45f8.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f95262165f9afdd1f502b629aaeb753e75bd91d4b743f829af52d4e7cdfa45f8.exe
Resource
win10v2004-20231222-en
General
-
Target
f95262165f9afdd1f502b629aaeb753e75bd91d4b743f829af52d4e7cdfa45f8
-
Size
751KB
-
MD5
79a1514ad7d7f1478679cf650d18cdd0
-
SHA1
f5a06231c8ebd51c2e19d6450944cc8a5abb43d5
-
SHA256
f95262165f9afdd1f502b629aaeb753e75bd91d4b743f829af52d4e7cdfa45f8
-
SHA512
a5c8a27e9f5dde9eaaa6ae69086fac60c2aa17398918077d2b722ec29ef3519f52f73949989687cf3d65b70bb65e08d403b05974e011b756b4f0ad4e1e129871
-
SSDEEP
12288:AN8Ard53rD22qx+6Tk3x0pp6uIU9WzHGqf5YmMjJ1eOZAvJxuRDo7TMMttwhHUc:AaA3rDIIsu0pAKyBojixAUoU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f95262165f9afdd1f502b629aaeb753e75bd91d4b743f829af52d4e7cdfa45f8
Files
-
f95262165f9afdd1f502b629aaeb753e75bd91d4b743f829af52d4e7cdfa45f8.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 729KB - Virtual size: 728KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ