Static task
static1
Behavioral task
behavioral1
Sample
f1ac86388ffe376b99f91b580e0d31128f385954d790121561717ed6bbb6561b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f1ac86388ffe376b99f91b580e0d31128f385954d790121561717ed6bbb6561b.exe
Resource
win10v2004-20240226-en
General
-
Target
f1ac86388ffe376b99f91b580e0d31128f385954d790121561717ed6bbb6561b.exe
-
Size
829KB
-
MD5
707b90ec211ff5a1c9292f80fdee0b36
-
SHA1
5fa7e481b898e93a2438a9902bbc12b64368191a
-
SHA256
f1ac86388ffe376b99f91b580e0d31128f385954d790121561717ed6bbb6561b
-
SHA512
4da929a2c1d4f7dc48df4989f3d24af42ab4c9bb236864fcdde44ea93f04913b59797e4090cea6c063c0beb2efde6e32b592931924db4fa5cde9377d36981485
-
SSDEEP
12288:KsMa2YUjyww0wiQ6lD1vOccAw13MBcveJuGhRa6VmLM3YWAydbfqD6HaK7ec9S:KsMa2Y2jomFWP13ycveAGoM3YW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource f1ac86388ffe376b99f91b580e0d31128f385954d790121561717ed6bbb6561b.exe
Files
-
f1ac86388ffe376b99f91b580e0d31128f385954d790121561717ed6bbb6561b.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 826KB - Virtual size: 826KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ