Static task
static1
Behavioral task
behavioral1
Sample
1180-198-0x00000000009B0000-0x0000000001248000-memory.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1180-198-0x00000000009B0000-0x0000000001248000-memory.exe
Resource
win10v2004-20240226-en
General
-
Target
1180-198-0x00000000009B0000-0x0000000001248000-memory.dmp
-
Size
8.6MB
-
MD5
5efff9a4babb4d747dda6cbe4b894337
-
SHA1
3a3c561796a9a386520b2a3a4ef2b60d0f9f78c5
-
SHA256
846a7f09c5f443ff5f89b73ed12cd17efa30d8cd84331b412e4b89a7df099c26
-
SHA512
ac7a519d20537097dbb7de3419680960a968053b95f68f3f6f3198ac7edc1f83de332b0715d2bbee0b8edcfd3d88362893c7235840fe10aab84fa1c49a9c63df
-
SSDEEP
196608:s3rfxU/oiNQKoIKHk/XM7PbFQJTPoRKhTe5diz:s7fK1QKoJE/c7zFATPzhm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1180-198-0x00000000009B0000-0x0000000001248000-memory.dmp
Files
-
1180-198-0x00000000009B0000-0x0000000001248000-memory.dmp.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE