Static task
static1
Behavioral task
behavioral1
Sample
60251702.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
60251702.exe
Resource
win10v2004-20240226-en
General
-
Target
60251702.exe
-
Size
205KB
-
MD5
15e98f1c3b6241d8a48d27cd34844d72
-
SHA1
64b7855f1416f7aa91cff438e0265d1ede2da3da
-
SHA256
fe0a89516c75b237dd4bf4e9a304a18a906baae2e1ccc70c02ea4c0af55126fa
-
SHA512
5ac6b49b2d508446758aaf4cfcefac556e68ce1bcec7bcb14eb6b609cd1d08c53b741b64cf483592cd0db41603afb36f037233192da1d38846defe31b7d7224c
-
SSDEEP
3072:9+EbQw5tKM/717+wUPnS21mQbnc+BR0pKREX/WONBuwrhmc7U1iIyx1IhNXOXcaa:6+86uwrhmkErFDnXAg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60251702.exe
Files
-
60251702.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ