Static task
static1
Behavioral task
behavioral1
Sample
61f5a655cae7a153cc95435024861d0c55880eb846426a1ab9c10c2da7ddad07.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
61f5a655cae7a153cc95435024861d0c55880eb846426a1ab9c10c2da7ddad07.exe
Resource
win10v2004-20240508-en
General
-
Target
61f5a655cae7a153cc95435024861d0c55880eb846426a1ab9c10c2da7ddad07
-
Size
2.9MB
-
MD5
f2402eeb3cf3d05ec3c93a11a30e2d5d
-
SHA1
a44cee394583e5bdb97afabf0877489c8698b4a0
-
SHA256
61f5a655cae7a153cc95435024861d0c55880eb846426a1ab9c10c2da7ddad07
-
SHA512
f6db7bcfd16e5868b22931289c7d2c12f2b5cf706fa29dae675d362e273a12a4008878d21c96c04448da50ec9056f8cb25ebdb99fef6903c51fde924cf60ca60
-
SSDEEP
49152:/flRt1k9bchDBHc1dQZad9SDrLPpCXOfBcno/ueRgCslWQXownwRi7Qr19Z5vVEp:p1UbmBHc1d0adgDrtZLbslWQwRisvZ5s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61f5a655cae7a153cc95435024861d0c55880eb846426a1ab9c10c2da7ddad07
Files
-
61f5a655cae7a153cc95435024861d0c55880eb846426a1ab9c10c2da7ddad07.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ