Static task
static1
Behavioral task
behavioral1
Sample
d36cbca418be1c05b6667c116d651cbd.exe
Resource
win7-20231129-en
General
-
Target
d36cbca418be1c05b6667c116d651cbd
-
Size
1.1MB
-
MD5
d36cbca418be1c05b6667c116d651cbd
-
SHA1
bb7c93e82c4577524d24b8764695274cce7ce993
-
SHA256
8bd9fe862edf203a566e8cc22c7042ed6d4da2e72d60eeed0a486e95922386b3
-
SHA512
2ddebf328c909081cfbd157f5fe9df86d20433882183b4a02075666b36750b3cb1b7a2bad34bc53a488ad4d2eb1b39bb1a840aa087045df69061310a9863573d
-
SSDEEP
24576:ImOAkOzq05/d3PK64J3HkPSgOD4OWoeAVHcI:7O3O2CK64JXkagSthrZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d36cbca418be1c05b6667c116d651cbd
Files
-
d36cbca418be1c05b6667c116d651cbd.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ