Static task
static1
Behavioral task
behavioral1
Sample
cba50c69b127ec9097b5e40675310658aae4dc111239459e61548f207ef8b6d2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
cba50c69b127ec9097b5e40675310658aae4dc111239459e61548f207ef8b6d2.exe
Resource
win10v2004-20231215-en
General
-
Target
cba50c69b127ec9097b5e40675310658aae4dc111239459e61548f207ef8b6d2
-
Size
2.1MB
-
MD5
b61104e69313cd96eac7f8861be20201
-
SHA1
70c6dca6662bb5fcc51c70735e32e00eebe97915
-
SHA256
cba50c69b127ec9097b5e40675310658aae4dc111239459e61548f207ef8b6d2
-
SHA512
65a1d070fd44bde52c873bff0a5869f366c12647fdf09f95a18138508db0be14575541562315607017e7c2058d14bb9ebd773bc585319a640f7e9897a4825a25
-
SSDEEP
24576:HyJv2zWhqpPnyxWRr6+WPnAhbp+NYnB5DZ+29U08PUteZ40C2zCU6onoOGdP:CztA7+NYQ2m08R4pGn6cS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cba50c69b127ec9097b5e40675310658aae4dc111239459e61548f207ef8b6d2
Files
-
cba50c69b127ec9097b5e40675310658aae4dc111239459e61548f207ef8b6d2.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ