Static task
static1
Behavioral task
behavioral1
Sample
mC7Uei8s0EHz22P.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
mC7Uei8s0EHz22P.exe
Resource
win10v2004-20240508-en
General
-
Target
mC7Uei8s0EHz22P.exe
-
Size
667KB
-
MD5
6a8b6caa6ad2af056f67a54bccdd3779
-
SHA1
670d8d7d62f12429aa5673a2392c6e95d0a62477
-
SHA256
afe12a12e407a6c54d0900f1971faa639a2dd8406e7587090ef6fb8cd748d0a9
-
SHA512
7a57b422c1c304a246e8a658e132830d7368c29e3208b0672b0307507d189e836e5df5cdcdebfa2ee9f96ae4d211a0a98593d71a61239e378f965315bb4e246b
-
SSDEEP
12288:wzaIx9Zp3UGaWwHHqDFL8y9zqn9zWFfJPFsduUV:whxnpMWwn+FLsn9zywdd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource mC7Uei8s0EHz22P.exe
Files
-
mC7Uei8s0EHz22P.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 659KB - Virtual size: 659KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ