Static task
static1
Behavioral task
behavioral1
Sample
36c7faa6bef7953ed7a6e22616a5aa00c5874a37a57652332905b770514541e1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
36c7faa6bef7953ed7a6e22616a5aa00c5874a37a57652332905b770514541e1.exe
Resource
win10v2004-20231215-en
General
-
Target
36c7faa6bef7953ed7a6e22616a5aa00c5874a37a57652332905b770514541e1
-
Size
696KB
-
MD5
18d5ad871cdce67ac8e69b7309346912
-
SHA1
4d43bd9863fb9741cdc3448e468413b075fa94b6
-
SHA256
36c7faa6bef7953ed7a6e22616a5aa00c5874a37a57652332905b770514541e1
-
SHA512
c20ebeaeed7d289d37240cc9a6cfc6461fafe2c5f2a30f74d9a78c4e50bb193b42fad8d6e2f8a7bec5ce039c3671ae04f100a7d95349e989100d45385056a828
-
SSDEEP
12288:erbZQ2keCJAC9bPFcWAJn8dl3PQMwHtxY1UKitmuNHE:efZiz5l/DwnY8t1k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36c7faa6bef7953ed7a6e22616a5aa00c5874a37a57652332905b770514541e1
Files
-
36c7faa6bef7953ed7a6e22616a5aa00c5874a37a57652332905b770514541e1.exe windows:4 windows x64 arch:x64
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 665KB - Virtual size: 665KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ