Static task
static1
Behavioral task
behavioral1
Sample
b62be8e845bef649abf78571529de789.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b62be8e845bef649abf78571529de789.exe
Resource
win10v2004-20240226-en
General
-
Target
b62be8e845bef649abf78571529de789
-
Size
1.3MB
-
MD5
b62be8e845bef649abf78571529de789
-
SHA1
112023c0e5a2656e362091a9f601c5e766da27eb
-
SHA256
e28b49173d1c4728a5d5b0c556465d1221ff76396566d76ff23e01a3a5fe5845
-
SHA512
df059e8686bdaee6e53be2a3e56f564806d7903f9c461d36b9425d2807300ed6a0e8ae76d1b033b4f04c79007ed80443701ac1d636a1b084d01f35638d37a124
-
SSDEEP
24576:GjMBKEr5/dLgK64JjaCLyMtL+USG6k/LCX8:GUKEUK64JZwUckOX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b62be8e845bef649abf78571529de789
Files
-
b62be8e845bef649abf78571529de789.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 199KB - Virtual size: 198KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ