Static task
static1
Behavioral task
behavioral1
Sample
306cc027d7a227d3fcf353f47eea9292c400dfae4063cfdb5b85a37c5978d79c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
306cc027d7a227d3fcf353f47eea9292c400dfae4063cfdb5b85a37c5978d79c.exe
Resource
win10-20240404-en
General
-
Target
306cc027d7a227d3fcf353f47eea9292c400dfae4063cfdb5b85a37c5978d79c
-
Size
667KB
-
MD5
e953d58e12762f7283bf62ad9f214dbb
-
SHA1
e2915c5f414312a3fdc7e5f353de3d3d15cd6a22
-
SHA256
306cc027d7a227d3fcf353f47eea9292c400dfae4063cfdb5b85a37c5978d79c
-
SHA512
993f5859da479952cb66fd2f286d3843092a1a7393a66b97ff174178d303d864ba8e10c459a2e68f8b28b0eb9f4ecefc90ac25e251febff21f033ec8aaab8004
-
SSDEEP
6144:tM0RkR33Bj+4jZr3iXlmGNa/LULvJ5+4weYmKNtgeAUBMmihN:tM0uRvVSVmGULqvJGe32/tk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 306cc027d7a227d3fcf353f47eea9292c400dfae4063cfdb5b85a37c5978d79c
Files
-
306cc027d7a227d3fcf353f47eea9292c400dfae4063cfdb5b85a37c5978d79c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 665KB - Virtual size: 664KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ