Static task
static1
Behavioral task
behavioral1
Sample
40a8a2a99510bf5d5bb8988fd06066a53d393379dde2f63d57721839a649c105.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
40a8a2a99510bf5d5bb8988fd06066a53d393379dde2f63d57721839a649c105.exe
Resource
win10v2004-20231215-en
General
-
Target
40a8a2a99510bf5d5bb8988fd06066a53d393379dde2f63d57721839a649c105.exe
-
Size
732KB
-
MD5
d5f616d2cdcad6ee4aae7f32fee56620
-
SHA1
de822e595fd83b7740397f75eb3a42c47ac5d399
-
SHA256
40a8a2a99510bf5d5bb8988fd06066a53d393379dde2f63d57721839a649c105
-
SHA512
957e5f95084ee30279d64dd663c25bffa0ed9d1fe8c4113f345967aa808a532084d09817e83fd6ea26b66f2fdbfa9ba9284d655dcc3e0dd16ed06b7882c25967
-
SSDEEP
12288:nqNR4EoOBKMNHlg20vNiXQocjI3yyuNED1WEe40aQt/3ZbiF:8oOBrBlQViX6jJy6EhWE90aAi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40a8a2a99510bf5d5bb8988fd06066a53d393379dde2f63d57721839a649c105.exe
Files
-
40a8a2a99510bf5d5bb8988fd06066a53d393379dde2f63d57721839a649c105.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 708KB - Virtual size: 707KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ