Behavioral task
behavioral1
Sample
a5e7d573e91033eb9bc300186f754394a91a114c73a6661d31dfb8225209030d.exe
Resource
win7-20240221-en
General
-
Target
a5e7d573e91033eb9bc300186f754394a91a114c73a6661d31dfb8225209030d
-
Size
312KB
-
MD5
ae68f525110174d36fd0a78f728ec1ac
-
SHA1
a1e118f23dfc15269400bd059d5960caf01a6ebe
-
SHA256
a5e7d573e91033eb9bc300186f754394a91a114c73a6661d31dfb8225209030d
-
SHA512
acdb4617b5c8aca3cab43d5af963f076d14bd9a55b4b0ad95f65490ee125022424453a1b0fd71776205027b1fc266e5918db44a7b81bb0d29befb34b1d8d741b
-
SSDEEP
6144:yMNCha6O+chMWnhE/deKaG6+9DzZzNIT9OsUp9kBbCSCH/:yMNCha6O+EMcKFJ6+93ZuokBWS
Malware Config
Signatures
-
Arkei family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5e7d573e91033eb9bc300186f754394a91a114c73a6661d31dfb8225209030d
Files
-
a5e7d573e91033eb9bc300186f754394a91a114c73a6661d31dfb8225209030d.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 216KB - Virtual size: 213KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ