Static task
static1
Behavioral task
behavioral1
Sample
39c6981bd32139dd43f2676b08ff633979c2471662c224edf6820945ae280c0c.exe
Resource
win7-20240221-en
General
-
Target
39c6981bd32139dd43f2676b08ff633979c2471662c224edf6820945ae280c0c
-
Size
538KB
-
MD5
3d3c6c351d96900498506b2afe38c790
-
SHA1
8f0769ba9513d14475a7ee5fbc8a0fcc025fcbc7
-
SHA256
39c6981bd32139dd43f2676b08ff633979c2471662c224edf6820945ae280c0c
-
SHA512
39b2d17055ed3752b9390d1ff4d78e0e45bedcaf201c3b03862acd294c17a4c961d631c4080c5a7a250e35c2cbed8bc1d04cd1e8ffb1a8aef136fa73ab2f7050
-
SSDEEP
6144:KlooZC0PSBalew9pNPgA/+ekDf4H444l:KnZC0vlHj4A/+ekD4H444l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 39c6981bd32139dd43f2676b08ff633979c2471662c224edf6820945ae280c0c
Files
-
39c6981bd32139dd43f2676b08ff633979c2471662c224edf6820945ae280c0c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 174KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ