Static task
static1
Behavioral task
behavioral1
Sample
b5cf618624df43618a33e366aed44a39db6c92c6e4c9dbe7905e415307028aee.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b5cf618624df43618a33e366aed44a39db6c92c6e4c9dbe7905e415307028aee.exe
Resource
win10v2004-20240226-en
General
-
Target
b5cf618624df43618a33e366aed44a39db6c92c6e4c9dbe7905e415307028aee.exe
-
Size
615KB
-
MD5
8e089d97fa7d7acabafb8ffd749876e5
-
SHA1
625e04a12599d830249c86edb35b05a99b68f537
-
SHA256
b5cf618624df43618a33e366aed44a39db6c92c6e4c9dbe7905e415307028aee
-
SHA512
471baa32b433bcd7585450fd2db4ea1ad186bf2d52244fe38dcdbd1c9a3c3b57ddc71475d3587570dd7d16f4f9451b18b77dde3a43b36d114d33562feac72a82
-
SSDEEP
12288:fUBa5WiPawnvlHEwl9bvgmr5jgtsvEG+yusvkXOUfDJI8JDr7:sziPa0vlHpghtK+jBFJDr7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource b5cf618624df43618a33e366aed44a39db6c92c6e4c9dbe7905e415307028aee.exe
Files
-
b5cf618624df43618a33e366aed44a39db6c92c6e4c9dbe7905e415307028aee.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 613KB - Virtual size: 612KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ