Static task
static1
Behavioral task
behavioral1
Sample
MFeZQOjlHLloPBO.exe
Resource
win7-20240508-en
General
-
Target
MFeZQOjlHLloPBO.exe
-
Size
714KB
-
MD5
4fbe89966908b5b8a41985277774652a
-
SHA1
431a0051b11c903217864115c29873a39ad9d55a
-
SHA256
409dd82ae03009f32397ee056fcf698e7ea1145184fc4749f00b5ed2534de2d5
-
SHA512
d88153ad9b9a9b37e2c404090746af7921e0e6010cc267e265f8ae2d256493bba515e69946e2da7fe928707f736695264536547d2a7c2f76d66f28f1f9a1c8fa
-
SSDEEP
12288:dLWET/mr9KaIJkGtz6/5wD1S3zCjtRQjWyS+0ytggK20521v7GoXF3k:dLWt+JkGt5D83mpRQjWyh0ytgT2Jvqc0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MFeZQOjlHLloPBO.exe
Files
-
MFeZQOjlHLloPBO.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 704KB - Virtual size: 703KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ