Static task
static1
Behavioral task
behavioral1
Sample
64b1048b77c2ce3fc9d81cdbddfd9e3a1d321ddb882e037245c9f75e3e3c2b23.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
64b1048b77c2ce3fc9d81cdbddfd9e3a1d321ddb882e037245c9f75e3e3c2b23.exe
Resource
win10v2004-20240508-en
General
-
Target
64b1048b77c2ce3fc9d81cdbddfd9e3a1d321ddb882e037245c9f75e3e3c2b23
-
Size
722KB
-
MD5
8909a8b8ce01bc8c2026dd49e9f8adda
-
SHA1
55f67deca95694aa8398be27729a417a938d4032
-
SHA256
64b1048b77c2ce3fc9d81cdbddfd9e3a1d321ddb882e037245c9f75e3e3c2b23
-
SHA512
1a7b6b3d31659ca4f9c9085d2b3e4d7bb8cf63b002b135f496b35613b028beb98859fc911407493b93789ea1161ba2859abdc98beed2ade25c7b949700886279
-
SSDEEP
12288:jWET/mr9KGE+iMs9+GAbwEpcjuSlI+/4XaSfVT86VWjeZ:jWtTs9vCwdjp0b9T8w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 64b1048b77c2ce3fc9d81cdbddfd9e3a1d321ddb882e037245c9f75e3e3c2b23
Files
-
64b1048b77c2ce3fc9d81cdbddfd9e3a1d321ddb882e037245c9f75e3e3c2b23.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 712KB - Virtual size: 712KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ