Static task
static1
Behavioral task
behavioral1
Sample
e742c13c67f2f60e58a0dc4e5f6f7389444fdd3f0ed55d969064e473a5d2462c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e742c13c67f2f60e58a0dc4e5f6f7389444fdd3f0ed55d969064e473a5d2462c.exe
Resource
win10v2004-20231215-en
General
-
Target
e742c13c67f2f60e58a0dc4e5f6f7389444fdd3f0ed55d969064e473a5d2462c
-
Size
155KB
-
MD5
039005f0450d51f0a3154f8c91d82bda
-
SHA1
ae87214ca1cc66d35b2ed60de7ad12e18d9f023b
-
SHA256
e742c13c67f2f60e58a0dc4e5f6f7389444fdd3f0ed55d969064e473a5d2462c
-
SHA512
662b5e4a33013edcd1f5f68622ff5301bfb5e6036f77d61b077b77a1832be2d8664674ce537df00f4db0e9279e2c50ba7439afcd7ba23106b1757f24517d28b7
-
SSDEEP
3072:Ax3405f++jEdEgp+fPpG134/QVQ1q6IFySuTmJ7/JYgZqVva/tp6wVEsSDt5hc+:KjlgMAd4o76IhuTmHYgZqVva/tpjEsSH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e742c13c67f2f60e58a0dc4e5f6f7389444fdd3f0ed55d969064e473a5d2462c
Files
-
e742c13c67f2f60e58a0dc4e5f6f7389444fdd3f0ed55d969064e473a5d2462c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ