Static task
static1
Behavioral task
behavioral1
Sample
L47fz5X2RSrsQIn.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
L47fz5X2RSrsQIn.exe
Resource
win10v2004-20240226-en
General
-
Target
5dbddc716f4143d4197f3035bfcb71a00613b91dfc7208ba86f6ac54504d12ca
-
Size
632KB
-
MD5
e2d974c1421cfe9f4d523da716ad6d0a
-
SHA1
8b13337583f774a53ff16b067cd439e358012ef2
-
SHA256
5dbddc716f4143d4197f3035bfcb71a00613b91dfc7208ba86f6ac54504d12ca
-
SHA512
9c951e4d812b52d7e63c907607859d0f063f8063a734a294f21b75422e8e6d47582bb3c4dc896baf7809f080c0c94dec6ebb14a6ac52961d9ff6a33ee5ea946d
-
SSDEEP
12288:/ItiCZ3nwyyalO/FUp7rDEubczfnlUv4lhxV/KtBsgILkfeSJ/5mmgVq:wtvJRlO/+p7rDEubcDnlUv6JitmgIAfB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/L47fz5X2RSrsQIn.exe
Files
-
5dbddc716f4143d4197f3035bfcb71a00613b91dfc7208ba86f6ac54504d12ca.zip
-
L47fz5X2RSrsQIn.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 648KB - Virtual size: 647KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ