Static task
static1
Behavioral task
behavioral1
Sample
bed7e88c15e7f319477a0cb10c5724c73cad6b49bacecd67012622dec8ebb739.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
bed7e88c15e7f319477a0cb10c5724c73cad6b49bacecd67012622dec8ebb739.exe
Resource
win10v2004-20240412-en
General
-
Target
bed7e88c15e7f319477a0cb10c5724c73cad6b49bacecd67012622dec8ebb739
-
Size
691KB
-
MD5
ffa04de0a4671707e4ea6188bbfe2e8b
-
SHA1
2242010f56dbf74dc4005a6f5a146d55959d8610
-
SHA256
bed7e88c15e7f319477a0cb10c5724c73cad6b49bacecd67012622dec8ebb739
-
SHA512
9d5ee8548a611e0ba7649eeee16a8fb1da91fecb3038afbf79ae6c50e110d71eb21e5490a88318b5ef2d53fd2a82f35f3670ff1dddacdccf96e03aac4fff1d90
-
SSDEEP
12288:ymHwHMBLVl0Vj4VbMgAnghjmXptCD26Z1LYpeYIIpO9YZGZN:ymQsSSVbMHnghjiptFmTwjw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bed7e88c15e7f319477a0cb10c5724c73cad6b49bacecd67012622dec8ebb739
Files
-
bed7e88c15e7f319477a0cb10c5724c73cad6b49bacecd67012622dec8ebb739.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 684KB - Virtual size: 683KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ