Static task
static1
Behavioral task
behavioral1
Sample
c747d74af0ec5a2bac392dc49226ddcdc28c5e2f5b805fcba16f328642951655.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c747d74af0ec5a2bac392dc49226ddcdc28c5e2f5b805fcba16f328642951655.exe
Resource
win10v2004-20240419-en
General
-
Target
c747d74af0ec5a2bac392dc49226ddcdc28c5e2f5b805fcba16f328642951655
-
Size
291KB
-
MD5
eb4baefc466a2ce216d5f4175ff46f40
-
SHA1
cf2870bedb1e40f156bf00f223e7f8d6f47562f2
-
SHA256
c747d74af0ec5a2bac392dc49226ddcdc28c5e2f5b805fcba16f328642951655
-
SHA512
eedef1da6e061d414fec983a11a400b38ca11decbaf1fd73e7c60e1ebff04374632e2dde45b97c33282697408527acbc3ddf2955a9d7b5cbd7205d18ffcd91a4
-
SSDEEP
6144:MWk4uvuexKhrFoVcx+0AEddgDDgpVtZI5lZP26axHU++4bVqnpC0Qu:MjMl+V5wqgpHZI5lB14bVAC0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c747d74af0ec5a2bac392dc49226ddcdc28c5e2f5b805fcba16f328642951655
Files
-
c747d74af0ec5a2bac392dc49226ddcdc28c5e2f5b805fcba16f328642951655.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 273KB - Virtual size: 273KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ