Static task
static1
Behavioral task
behavioral1
Sample
81e5966f41777a1a1db7bd4b9944610b5120092d663843f9c92d062d6ccc8dfe.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
81e5966f41777a1a1db7bd4b9944610b5120092d663843f9c92d062d6ccc8dfe.exe
Resource
win10v2004-20231215-en
General
-
Target
81e5966f41777a1a1db7bd4b9944610b5120092d663843f9c92d062d6ccc8dfe
-
Size
669KB
-
MD5
bda2c151a22517c88b6f2cd4c86a7ad2
-
SHA1
e96e552d3b0030f902873053e302fdf7035a2fc5
-
SHA256
81e5966f41777a1a1db7bd4b9944610b5120092d663843f9c92d062d6ccc8dfe
-
SHA512
cf4a618ca22d5ac96203af067d4bd9cddab683a9c5cea70e2986c1a8c339621d717251809524e3e828c20255700213e600baf8b049552dddc08d428eb2359785
-
SSDEEP
12288:I1keQ5vzifaY9i0dERtNX5lTkcdb+Qs1A/MP650UFzOptK6BTz:I1kriyY9iTNzTkIbQMrKrK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81e5966f41777a1a1db7bd4b9944610b5120092d663843f9c92d062d6ccc8dfe
Files
-
81e5966f41777a1a1db7bd4b9944610b5120092d663843f9c92d062d6ccc8dfe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 660KB - Virtual size: 659KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ