Static task
static1
Behavioral task
behavioral1
Sample
a682de1d74f7f924fefe2a35d48962c15a33c30029187c6e080235359d7ff0af.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a682de1d74f7f924fefe2a35d48962c15a33c30029187c6e080235359d7ff0af.exe
Resource
win10v2004-20240419-en
General
-
Target
a682de1d74f7f924fefe2a35d48962c15a33c30029187c6e080235359d7ff0af.exe
-
Size
676KB
-
MD5
5f83306eee97a41d878ca9372eb8e9c1
-
SHA1
4d63d299738a9aeaa9163f0088e0eb564ee776c8
-
SHA256
a682de1d74f7f924fefe2a35d48962c15a33c30029187c6e080235359d7ff0af
-
SHA512
7e72bf1a8a6f666f6ee6151ed34cf40e743d736f08559afe501249a59b28e4f7e4052a1779b4ecbdff8c1901ac1c7c46946b4a5ad719c1f2c5a89800a87a6dab
-
SSDEEP
12288:qeB+8ut3o4a8TOgfWUiAcoIXn7xiHoaYyqido0gEXlciWdy/wXCQI:88Ko4bf2AZiEIaYedNgOvQXB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a682de1d74f7f924fefe2a35d48962c15a33c30029187c6e080235359d7ff0af.exe
Files
-
a682de1d74f7f924fefe2a35d48962c15a33c30029187c6e080235359d7ff0af.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 670KB - Virtual size: 669KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ