Static task
static1
Behavioral task
behavioral1
Sample
9e4810c6e8285f2a8c46a4acfde93cec1b1a7b9468f5539d5a7854398e01e56b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9e4810c6e8285f2a8c46a4acfde93cec1b1a7b9468f5539d5a7854398e01e56b.exe
Resource
win10v2004-20240412-en
General
-
Target
9e4810c6e8285f2a8c46a4acfde93cec1b1a7b9468f5539d5a7854398e01e56b
-
Size
696KB
-
MD5
0f3c74c55c05600ff44dfef8453ecaba
-
SHA1
3adc136c4eff361dbf3a600fe8580e090de43313
-
SHA256
9e4810c6e8285f2a8c46a4acfde93cec1b1a7b9468f5539d5a7854398e01e56b
-
SHA512
b38018bbdc462cd4b988c8201ac5ec8b6d7f3b7abeba2fae18f3ab158046edab92b0bb4004c5cd959bc4c964b9d2529716afa2c0145b5b701ac1787ff3a29492
-
SSDEEP
12288:euPrxJ0JTvZPo6Tw+J1chekQWDBjEf2n4W4iP0yUCfgL38st+:5T0JdPo6POhekvDx3RKCfu7U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9e4810c6e8285f2a8c46a4acfde93cec1b1a7b9468f5539d5a7854398e01e56b
Files
-
9e4810c6e8285f2a8c46a4acfde93cec1b1a7b9468f5539d5a7854398e01e56b.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 684KB - Virtual size: 683KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ