Static task
static1
Behavioral task
behavioral1
Sample
20f833a2da03b679637ab02bf4c18d2fe731c7273e4333eef35e6c2d9b2ec67d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
20f833a2da03b679637ab02bf4c18d2fe731c7273e4333eef35e6c2d9b2ec67d.exe
Resource
win10v2004-20240226-en
General
-
Target
20f833a2da03b679637ab02bf4c18d2fe731c7273e4333eef35e6c2d9b2ec67d.exe
-
Size
88KB
-
MD5
8f92613e5a81aa192bc40a583bd7e1f3
-
SHA1
888d4249cf1256a9683ee4b16a279ac433ca76ef
-
SHA256
20f833a2da03b679637ab02bf4c18d2fe731c7273e4333eef35e6c2d9b2ec67d
-
SHA512
11fa1206359a44601f448ea24666b08013ad0d6c2de43d678bb49d52d621611e039e63fa56a903b3e58bfc143c5ee6c35a59144f6711c03dfb2478c9c14aa74a
-
SSDEEP
1536:8fjBqXbcDkWUtfcVIdcl0N0LPOBAmbmwHwNqhOtxR8o:2j4XIo1ndcl0N0LP0AwmwQNqg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20f833a2da03b679637ab02bf4c18d2fe731c7273e4333eef35e6c2d9b2ec67d.exe
Files
-
20f833a2da03b679637ab02bf4c18d2fe731c7273e4333eef35e6c2d9b2ec67d.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
mscoree
_CorExeMain
Sections
.text Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ