Static task
static1
Behavioral task
behavioral1
Sample
b4766f951ea0bb8fac6165ccb2851839699c18b9c993f6dc67be39f1fef2b400.exe
Resource
win7-20240215-en
General
-
Target
b4766f951ea0bb8fac6165ccb2851839699c18b9c993f6dc67be39f1fef2b400.exe
-
Size
3.1MB
-
MD5
c25d83ca26d86d57064e521b5c052a4e
-
SHA1
337c4c76ea115aa6a64ea0ef120e19801d5e8778
-
SHA256
b4766f951ea0bb8fac6165ccb2851839699c18b9c993f6dc67be39f1fef2b400
-
SHA512
ed8c361a9fe46652b67c10c958fd96ac2fcfca78507d57db7448dc769f1fa846bdb2c5ab7ddfb574db6cc00f5e689c2545b84793cedc654298675a566782ffcf
-
SSDEEP
49152:LoZNSyRRu6MuGHrKPQqWDE0xvGCMSUIp1fdB1bqI5GB9Z6RMMLTvvw/XOU0hijw:krS6Wu4Q0xvGheXZnYMRpTS6ij
Malware Config
Signatures
-
Detects executables packed with SmartAssembly 1 IoCs
resource yara_rule sample INDICATOR_EXE_Packed_SmartAssembly -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4766f951ea0bb8fac6165ccb2851839699c18b9c993f6dc67be39f1fef2b400.exe
Files
-
b4766f951ea0bb8fac6165ccb2851839699c18b9c993f6dc67be39f1fef2b400.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 178KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ