Static task
static1
Behavioral task
behavioral1
Sample
a4043ae24bd349588a0f7bc717ba909a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a4043ae24bd349588a0f7bc717ba909a.exe
Resource
win10v2004-20240221-en
General
-
Target
a4043ae24bd349588a0f7bc717ba909a
-
Size
204KB
-
MD5
a4043ae24bd349588a0f7bc717ba909a
-
SHA1
2b08ce0d2732f8c9b1ac8655beadfdb35e5090e7
-
SHA256
1db43de845d66cb14bd3c208206d802bc359da4d98be31344277f58b2e793da7
-
SHA512
5638ced3c38432da5575e59674cdcd63db073faae418bda5246d19ef102deff23c146d12cd4b0c9a7e086f6b5b1bdfac40606683113af0c0f3e55fc506fdf4b0
-
SSDEEP
3072:HFjFobVEapaMrkwJ0r4+2aNNqgdadjrwUBFskelIozWZPPwZbneKe9ofU:lhobVEhMwzr48r1dUsk9rsU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a4043ae24bd349588a0f7bc717ba909a
Files
-
a4043ae24bd349588a0f7bc717ba909a.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ