Static task
static1
Behavioral task
behavioral1
Sample
787ff9cbac5192fa5e8020864d4867c9f8973f18e6eec942d3b0183c63422f17.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
787ff9cbac5192fa5e8020864d4867c9f8973f18e6eec942d3b0183c63422f17.exe
Resource
win10v2004-20240508-en
General
-
Target
787ff9cbac5192fa5e8020864d4867c9f8973f18e6eec942d3b0183c63422f17
-
Size
783KB
-
MD5
55dd7d9ead8f4933e25eab0d86dda152
-
SHA1
229ad4397d476aaf1648255d83e52642ea523ee1
-
SHA256
787ff9cbac5192fa5e8020864d4867c9f8973f18e6eec942d3b0183c63422f17
-
SHA512
58fe757a3a208783d4a565b9046ee93000e514e7eecb6d7c656877f519cef176fb59e1fd3562b9eea5aa720ab24ec53223ccf884cef367ead232b54c304bc7bc
-
SSDEEP
24576:FXklbXkle+GA0/9yVFdWXklgEwgLrI6GqGcgmCxHKXkl:FXCbXCJq4NWXCgExHI4exqXC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 787ff9cbac5192fa5e8020864d4867c9f8973f18e6eec942d3b0183c63422f17
Files
-
787ff9cbac5192fa5e8020864d4867c9f8973f18e6eec942d3b0183c63422f17.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 764KB - Virtual size: 763KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ