Static task
static1
Behavioral task
behavioral1
Sample
848fcca9a38e5a9dd4b91bf2a8a7457054879293e0a51e605586afe149994e43.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
848fcca9a38e5a9dd4b91bf2a8a7457054879293e0a51e605586afe149994e43.exe
Resource
win10v2004-20240508-en
General
-
Target
848fcca9a38e5a9dd4b91bf2a8a7457054879293e0a51e605586afe149994e43
-
Size
159KB
-
MD5
59cac5506a3266e4db3f28dd7f9a93d8
-
SHA1
3192699b309f131db97a318270f9cfc234c2cc50
-
SHA256
848fcca9a38e5a9dd4b91bf2a8a7457054879293e0a51e605586afe149994e43
-
SHA512
0ad2745e429b3fbf042e82425fd12042270f22c0142fe0960dcc816a7524c1c7451ccec28f921c0609640a44030932730270928a58d98077bb76f1c5ddb83cdd
-
SSDEEP
3072:7Mx0VQAWrhWShtNZm0RTmTvrJsk6ViBpOMT9FzeWmoyYK/QvB:604nZrRoaViBlPeZUv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 848fcca9a38e5a9dd4b91bf2a8a7457054879293e0a51e605586afe149994e43
Files
-
848fcca9a38e5a9dd4b91bf2a8a7457054879293e0a51e605586afe149994e43.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ