Static task
static1
Behavioral task
behavioral1
Sample
te.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
te.exe
Resource
win10v2004-20240508-en
General
-
Target
te.exe
-
Size
596KB
-
MD5
72128b4146fa5891f9ff2cab88bef090
-
SHA1
f02f003c6de57e9853787d635a46db5818a2d9d4
-
SHA256
6c65ac86a784bc25aa87d906486437a16c510293c478bda5ebf1f455b85b233c
-
SHA512
fbf6ee8420c1ed41210aa113eb8ee1f8b77a8b70bf749730917c70ee4f0b97042000432873c10546b4c8071d47658e788bc05c73f4042d302744e58b658ec114
-
SSDEEP
12288:T/4NCvLKlkPKewRq1BrH2hvBIJ1eX9Lo7I0hILh1zPG8XTGDzBTgi:0+SkQq1QhGJ4X1J0hIdFZ+BM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource te.exe
Files
-
te.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 594KB - Virtual size: 594KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ