Static task
static1
Behavioral task
behavioral1
Sample
2a559a5178e0803c0a4067376cf279d00cade84b37158f03b709e718d34f65f9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2a559a5178e0803c0a4067376cf279d00cade84b37158f03b709e718d34f65f9.exe
Resource
win10v2004-20240226-en
General
-
Target
2a559a5178e0803c0a4067376cf279d00cade84b37158f03b709e718d34f65f9
-
Size
1.1MB
-
MD5
d6fad881e71df95547067564c40627bd
-
SHA1
af2c2af7f4adc7bd5a2ac8172f7a381cf92775a2
-
SHA256
2a559a5178e0803c0a4067376cf279d00cade84b37158f03b709e718d34f65f9
-
SHA512
52dc5161fc8acc7c5606d2cafeeaaffc4241f6dd7587920b2c92b8b5ed191b0fe06d349fb0debdcce62c90a1352cd0ee50c664d0660e6a4381b1f99e952c5a9a
-
SSDEEP
12288:WrxhVnjUi/3inqxip1r6CZKh3BxAU2+mSAOdPm1N6fx:+v/iZYUC3BxAU2+O0x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a559a5178e0803c0a4067376cf279d00cade84b37158f03b709e718d34f65f9
Files
-
2a559a5178e0803c0a4067376cf279d00cade84b37158f03b709e718d34f65f9.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 563KB - Virtual size: 562KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 577KB - Virtual size: 577KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ