Static task
static1
Behavioral task
behavioral1
Sample
67bcd0a161271dff895fd94e6810086c8cd9d3b0b3dcaa5ab21edd73ad301e7e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
67bcd0a161271dff895fd94e6810086c8cd9d3b0b3dcaa5ab21edd73ad301e7e.exe
Resource
win10v2004-20240412-en
General
-
Target
67bcd0a161271dff895fd94e6810086c8cd9d3b0b3dcaa5ab21edd73ad301e7e
-
Size
873KB
-
MD5
c6865e8d066467da005c85339e584bed
-
SHA1
2f31318645b43209a8564137a2120e6138083a1e
-
SHA256
67bcd0a161271dff895fd94e6810086c8cd9d3b0b3dcaa5ab21edd73ad301e7e
-
SHA512
658a9d0f7a5e3a37a0e7bc2093698d335e2bff510168eb4b72149f625e7cd654ee834d0d569cb995c02d9e3cabfe5adf05d87b651c792e4d4c2a291442ba81ed
-
SSDEEP
6144:r+5WQGqtFkMHlY7aIZgNvHs7IXu7be4tB46hvWAI24s+lLXgXT7O2uoh7IQYpipW:r+5+qzYNi6JWAI1MT7LKQYip7Q1jNSc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67bcd0a161271dff895fd94e6810086c8cd9d3b0b3dcaa5ab21edd73ad301e7e
Files
-
67bcd0a161271dff895fd94e6810086c8cd9d3b0b3dcaa5ab21edd73ad301e7e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 794KB - Virtual size: 794KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ