Static task
static1
Behavioral task
behavioral1
Sample
a1f5fdb5d0e3b1186942b0131db02e3f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a1f5fdb5d0e3b1186942b0131db02e3f.exe
Resource
win10v2004-20240221-en
General
-
Target
a1f5fdb5d0e3b1186942b0131db02e3f
-
Size
95KB
-
MD5
a1f5fdb5d0e3b1186942b0131db02e3f
-
SHA1
73bb6b819b742966a642844eef08425b9d798af9
-
SHA256
e871fa48ba40361fa6bd0fe3a831e99d61927e7d7d60801b90033f5f0af93d1f
-
SHA512
b2012bf826c2adba32887dea4c60bf19327d60a91c1596952c63b02add0d75f040263d06b7d04ac56e0c853b364d3d4e10727a3d56d5eb28e68b1983af9d5222
-
SSDEEP
1536:I8jc9LaykgCeAdZuZY/9JK/r7GHCbPUeN93uv7/0TbA3OKaQSDOxgtM4idF:I8ALamu4YvK/PGi1ZEQQSDG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1f5fdb5d0e3b1186942b0131db02e3f
Files
-
a1f5fdb5d0e3b1186942b0131db02e3f.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ