Static task
static1
Behavioral task
behavioral1
Sample
42a1a17d102279ab9e698caf056bae9d4a8e1a701d560ac2e76982cfa30302b9.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
42a1a17d102279ab9e698caf056bae9d4a8e1a701d560ac2e76982cfa30302b9.exe
Resource
win10v2004-20240508-en
General
-
Target
42a1a17d102279ab9e698caf056bae9d4a8e1a701d560ac2e76982cfa30302b9
-
Size
340KB
-
MD5
18235dc4fd92a44cd7591e78a72ca09c
-
SHA1
d1946308a72a3fcbcee3092cc0df2ae025a3425b
-
SHA256
42a1a17d102279ab9e698caf056bae9d4a8e1a701d560ac2e76982cfa30302b9
-
SHA512
9bd076f714ed4d28b26d04349c2df8d6436b152b27896523e4666283013b30556ada4166c5e4f229dc72fedbf9a0fdabaf374d500eb6b3b7f3813d41fe3aee15
-
SSDEEP
3072:6gxZ2uPGmEam3wP5P2gvwiw0UnP2gvwiw07qlq3QPfMpEMRp70OKKKKKKiKdKdKT:7Z2uPGVOh2gvw112gvw180UuIY4nHa2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42a1a17d102279ab9e698caf056bae9d4a8e1a701d560ac2e76982cfa30302b9
Files
-
42a1a17d102279ab9e698caf056bae9d4a8e1a701d560ac2e76982cfa30302b9.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 324KB - Virtual size: 321KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ